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Quality assurance is here to stay 


T he drive to agile methodologies has 
held out the promise of software 
development teams without a dedicat¬ 
ed quality-assurance specialist—or 
organizations without test/QA depart¬ 
ments. 

Sorry, that’s not going to happen. 
Sure, dev teams can and should focus 
on building quality into the product. Of 
course, code repositories can enforce 
standards for unit testing. Certainly, 
business stakeholders should regularly 
review the software to ensure that it 
meets their business requirements, just 
as architects should review against 
technical requirements. 

All of those trends will improve soft¬ 
ware quality by identifying defects 
sooner so they can be fixed less expen¬ 
sively. All of those trends will shorten 
software release cycles and lower soft¬ 
ware costs. 

However, no matter how you slice it, 


sophisticated software will require 
sophisticated testing that goes beyond 
what developers can do. The role of the 
dedicated test professional or QA team 
may be diminished, but it has not been 
eliminated. 

That doesn’t mean that we should 
be satisfied with the speed of software 
testing, either within the development 
team or in a dedicated quality-assur¬ 
ance group. There is a business imper¬ 
ative to release software as early as 
possible and to drive costs out of the 
process. The QA function, which 
often comes at the end of the time¬ 
line, is both squeezed by coding 
delays, budget pressures and the 
CEOs demand to “ship it faster, ship 
it now.” With no loss of quality, of 
course. 

Whats a development team lead or 
software development executive to do? 
Some answers (as you’ll read in Marnie 


Hutcheson’s article, “Your tests need to 
go faster,” on p. 47), involve increasing¬ 
ly automated test suites. Some involve 
leveraging the latest in DevOps and 
Continuous Delivery products or serv¬ 
ices. Some involve sophisticated collab¬ 
oration. And certainly with the latest in 
tools, and with careful policies, a team 
can squeeze a lot of time out of the 
process. 

Not all of it, though. It’s our feeling 
that while the goal may be to elimi¬ 
nate the need for discrete, human- 
powered testing phases, we should 
never expect to totally meet that goal. 
Unless you plan to turn your cus¬ 
tomers or end users into beta testers 
(and we acknowledge that this is 
trending), someone, somewhere, 
needs to perform QA prior to release. 
All the automation in the world can’t 
eliminate the need for QA. Thank 
heavens. I 


IDEs in the browser are the future 


W e have seen the future of the 
integrated development envi¬ 
ronment, and for development teams, 
that means an IDE delivered from the 
cloud into a browser. We’re already see¬ 
ing this move to the cloud happen with 
business and office productivity soft¬ 
ware (Salesforce, Microsoft’s Office 
365, Adobe Photoshop), and for many 
of the same reasons, IDEs will not be 
far behind. 

To write software, a development 
team’s IDE needs libraries, configura¬ 
tions, links into the continuous inte¬ 
gration and build system, ties into the 
testing environment, and whatever 
extra plug-ins and add-ons are needed 
by the organization to produce its 


acceptable standard of code. 

Well, a cloud-based, browser-deliv¬ 
ered IDE solves all of these issues. It’s 
something that’s been hinted at for some 
time. The Eclipse Foundation, for exam¬ 
ple, has been working on the Orion proj¬ 
ect, and on a headless Eclipse installa¬ 
tion that acts as a server for client-side 
developers. Both projects have been 
designed specifically to increase IDE 
deployment velocity. And, on p. 16 
(“Browser-based IDE Codenvy catches 
investors’ eyes”), we spotlight a Java- 
based IDE startup that’s attracted seri¬ 
ous attention from investors. 

That is what the move to the brows¬ 
er is all about: velocity. Rather than 
spending the first week with a new hire 


installing Eclipse and all the stuff that 
goes with it, you can clone and deploy a 
development environment, exactly as 
you would fork a project on GitHub, for 
example. Who wouldn’t want to be able 
to share a fully configured IDE with 
their team? 

And for ISVs with hosts of APIs, the 
browser-based IDE model is a true 
administrative and productivity boost. 
Imagine if programmers don’t have to 
download anything to write software for 
your platform. They simply have to 
click on a link, enter security creden¬ 
tials, open a template, click a few but¬ 
tons, associate a few variables, and then 
hit “deploy.” The browser as IDE: It is 
the future. I 
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FEEDBACK 



How to spur 

functional 

programming 



Much of what you say (in “Code Watch: 
Risky languages,” March 2013, p. 61) 
depends on the technology in question. 
For instance, having used F# for the 
last couple of years, and having written 
almost as much code with it as I have 
using C# at work, I would have no hes¬ 
itation in deploying it to a production 
environment. Just think: no null-refer¬ 
ence exceptions; no uninitialized vari¬ 
ables; the correctness afforded by 
immutability as a default; corner cases 
caught by pattern matching; the list 
goes on. 

I do a lot of C# and F# coding, and 
C# feels very restrictive and primitive 
in comparison. It can often be frustrat¬ 
ing to overhear conversations where 
colleagues are struggling with a prob¬ 
lem that could easily be solved using 
discriminated unions and pattern 
matching, and then seeing the final 


result be overly complicated, prone to 
null-reference exceptions, and needing 
too much testing because not enough 
static guarantees via the type system 
could be made using C#. 

One of the problems in getting F# 
adopted in a largely C# or VB.NET envi¬ 
ronment is the general delusion held by 
many developers that just because the 
language has lambda functions and 
LINQ, it means they are already doing 
functional programming, so there is no 
need to look further. What they don’t 
realize is that using a functional pro¬ 
gramming language like F# involves a lot 
more than just lambda functions; it also 
has features like immutability by default, 
elimination of null-reference exceptions, 


elimination of uninitialized member 
variables, discriminated unions, pattern 
matching, units of measure, and many 
other features that would be a huge ben¬ 
efit to enterprise software. 

The fact of the matter is that using 
F# in conjunction with C# or VB.NET 
in an enterprise setting would lift the 
overall reliability and robustness of the 
software produced by a large margin. 
Patrick 
Australia 

What do you think? 

Letters to SD Times should include the 
writer's name, company affiliation and 
contact information. Letters become the 
property of BZ Media and may be edited. 
Send to feedback@bzmedia.com. 



► What's going on with Android? 

By now you've heard about Andy 
Rubin leaving his post as head of 
the Android team. His replace¬ 
ment is Sundar Pichai, the now 
former head of development for 
Chrome. That's the news, but 
what does it mean? Well so far, 
analysts are somewhat stumped, as Alan Zeichick 
described: "The question is: What is the real story? The 
obvious speculation is that Google may have too many 
mobile platforms, and may look to merge the Android and 
Chrome OS operating systems." Can anyone make heads or 
tails of it? Read more at sdt.bz/41527. 

► Agile: Mind, body and (company) soul 

Shunra's Todd DeCapua explains what it takes to do agile— 
really do agile: "An increased focus on performance with 


www.sdtimes.com 

speed, quality and value is fundamental. Integrating this 
focus with maturing agile teams and customer-driven col¬ 
laboration results in a customer-centric—not a developer¬ 
centric—movement." But is doing this harder than it 
looks? You can read more at sdt.bz/41541. 

► Spock as a model for Al behavior 

David Gerrold's back again, this time about 
how artificial intelligence can possibly devel¬ 
op emotions. If we want to know what a 
computer with emotions looks like, it might 
look like Spock, who, despite his Vulcan pro¬ 
clivity for logic, also felt emotions. Says Ger- 
rold: "When we finally do create a true intel¬ 
ligence engine, one that can demonstrate behaviors that 
shows up as sentience, it is possible—maybe even likely— 
that it will have a Spock-like intelligence." You can read an 
in-depth look at the subject at sdt.bz/41525. 
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RSA sticks with traditional security steps 

But new focus is put on cloud encryption, license management 


BY ALEX HANDY 

Now more than a decade old, the RSA 
Conference in San Francisco in March 
remained predominantly focused on 
traditional security practices rather 
than hot new inventions for protection. 
The event was highlighted by keynotes 
from Internet co-inventor Vint Cerf, 
Wikipedia founder Jimmy Wales, and 
even former Secretary of State Con- 
doleezza Rice. 

SafeNet, for example, was on hand 
to talk about data protection through 
encryption. While one of the themes 
of this years conference was “Rig 
Data Revolutionizes Security,” much 
of the discussion around Big Data was 
simply focused on encrypting it and 
locking it away with proper access 
controls. 

Dave Hansen, president and CEO 
of SafeNet, said that there is a 
tremendous need for encryption in 
cloud-based data-driven applications. 
Unfortunately, he also said many com- 


Getting closer to the Internet of Things 

Google's chief Internet evangelist (and co-author of the Inter¬ 
net's most basic protocols) Vint Cerf was on hand at the RSA 
Conference to discuss the types of encryption and authentica¬ 
tion routines needed to keep up with the forthcoming "Internet 
of Things." 

"Back in the days when Interop was meeting here [at the 
Moscone Center], someone said as a joke, 'Some day there'll be 
toasters on the Internet,''' said Cerf in his keynote. "And someone 
actually built a toaster that could accept an SNMP packet to 
choose how burnt you wanted your toast. Since that time, a lot of 
these other devices are showing up with processing capabilities. 

"I used to tell jokes about light bulbs having IP addresses. I 
can't joke about that anymore because someone sent me an 
IPv6 light bulb," he added. 

Once all of these devices are using the Internet, they must 
also be secured just like any other Internet-enabled computer. 
As an example, Cerf pointed out that high-end refrigerators now 
include LCD screens, built-in Wi-Fi, and browsers. He mused 
that, perhaps if we're not careful, we could see a major cyber 
disaster, like when refrigerators attack. 

Compounding the problem, said Cerf, is the fact that many 
new Internet-enabled devices aren't managed by the end user 
directly: They're managed online through a third-party service. 

"The solution is to put [all of these devices] on the local net 


ciple of least authority, or POLA. POLA 
is a guiding principle for developing 
secure software by isolating objects. 

Karp said that isolating objects pre¬ 
vents the abuse of object access privi¬ 
leges. “Some you will find already are 
using some of these standards,” he said. 
“Many places already say you’re not 
allowed to have global static mutables. 
This is just a continuation of things 
you’re already doing.” 

Stiegler compared POLA to object- 
oriented programming, but said that 
POLA takes object orientation to its 
logical extremes. 

“This is like object-oriented modu¬ 
larization put on steroids, or taken all 
the way,” he said. “It’s the real thing. 
Once we do that, we find we get securi¬ 
ty properties almost for free.” I 



Google's Vint Cerf gives an update on the Internet being connected 
to practically everything. 


at home, and use the mobile phone to control them," said Cerf. 
"This also opens up the field to third parties. This notion of 
allowing third parties to manage things is very attractive." 

Thus, while it might be nice to adjust the thermostat by 
hand, perhaps it's easier to simply let the computer maintain a 
reasonable default temperature throughout the house. 

"All of that has to be authenticated, because someone could 
turn all the A/C units in the U.S. on and off and whiplash the 
power grid,” said Cerf. 

He postulated that a black-box public/private-key generation 
system could be created to help with both identity and authen¬ 
tication of such devices. Such a device, however, he left for the 
audience to create as homework. I —Alex Handy 


panies only decide to encrypt their 
cloud data after a breach has 
occurred. 

But Hansen also said that the focus 
of security products, like those 
SafeNet sells, have changed over time. 
While DRM and anti-piracy measures 
were popular in the past, license man¬ 
agement is more popular today. To 
that end, SafeNet created Sentinel 
Cloud Services to allow developers to 
authenticate and license software 
remotely through an API and authen¬ 
tication service. Sentinel Cloud Servic¬ 
es allows developers to add functional¬ 
ity similar to that used in Microsoft 
Windows Genuine Advantage, where 
software authenticates with a remote 
licensing server over the Internet to 
validate its license. 

Elsewhere at 
RSA, Alan Karp 
and Marc Stiegler, 
both of HP Labs, 
discussed the prin- 
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Cryptography pioneers 
snag 2012 Turing Award 

MIT researchers Shafi Goldwasser and Silvio Micali 
honored for security breakthroughs 


BY SUZANNE KATTAU 

Modern cryptography involves protect¬ 
ing oneself from potential enemies, a 
definition shaped by Shafi Goldwasser 
and Silvio Micali, researchers at the 
Massachusetts Institute of Technology 
whose pioneering work earned them the 
2012 A.M. Turing Award last month. 

The Association for Computing 
Machinery (ACM) announced in 
March that the professors had won the 
award for their work in the field of 
provable security, efforts that helped 
lay the mathematical foundations that 
made modern cryptography possible. 

“The encryption schemes running in 
todays browsers meet their notions of 
security,” said Vint Cerf, ACM presi¬ 
dent and former Turing Award recipi¬ 
ent. “The method of encrypting credit 
card numbers when shopping on the 
Internet also meets their test. We are 
indebted to these recipients for their 
innovative approaches to ensuring 
security in the digital age.” 

What exactly is provable security? 
“Provable security essentially means that 
you build a single scheme, and you then 
prove mathematically that no matter 


what the enemy does, it cannot succeed,” 
said Silvio Micali, Ford professor of engi¬ 
neering at MIT and a principal investiga¬ 
tor at the MIT Computer Science and 
Artificial Intelligence Lab (CSAIL). “You 
actually develop a system in which you 
can prove that nothing is going to work 
against your system, a single scheme that 
can guarantee against anything possi¬ 
ble—even things we have not thought 
about—that can go wrong.” 

The field of provable security has 
helped shape cryptography. Goldwasser 
and Micali agreed that the field of mod¬ 
ern cryptography means anything that 
involves a potential enemy, which is, “in 
the case of authentication...someone who 


■ The A.M. Turing Award is the ACM's 
most prestigious technical award. It is giv¬ 
en for major contributions of lasting 
importance to the computing community. 

■ The ACM has handed out the A.M. Turing 
Award each year since 1966. The award is 
named after Alan Mathison Turing (1912- 
1954), a British mathematician and com¬ 
puter scientist who made fundamental 
advances in computer architecture, algo- 


NEWS , is 

is trying to pretend that they’re me,” said 
Shafi Goldwasser, RSA professor of elec¬ 
trical engineering and computer science 
at MIT and a principal investigator at 
CSAIL. “In the case of a proof sequence, 
it’s someone who is trying to convince 
you of an incorrect statement. In all these 
things, there’s some adversary, as we call 
him, and this adversary, in modern cryp- 
g tography, is also computationally bound- 
J ed so it doesn’t have infinite power.” 

V Micali added that it’s important to 
e know that the word “cryptography,” ety- 
“ mologically speaking, used to simply 
jo mean “secret writing.” It used to involve 
just knowing how to send a message that 
£ is understood only by the recipient. 
“But today, cryptography is a science of 
adversarial computing,” he said. 

“Adversarial computing is comput¬ 
ing in the presence of a potential adver¬ 
sary; you don’t know that you are deal¬ 
ing with somebody who may actually be 
an enemy. Therefore, it is becoming a 
very large field because secret messag¬ 
ing goes only so far. But interacting 
with others is the story of humanity.” 

By formalizing the concept that 
cryptographic security had to be com¬ 
putational rather than absolute, Gold¬ 
wasser and Micali created mathemati¬ 
cal structures that turned cryptography 
from an art into a science, the ACM 
explained. Their work addresses impor¬ 
tant practical problems such as the pre¬ 
vention of data from being viewed or 
modified, the ACM said. 

In regards to cryptography, computa¬ 
tional security and absolute security are 
different when it comes to the enemies 
involved. Said Goldwasser, “Computa¬ 
tional security is something that Claude 
Shannon, the father of information theo- 
continued on page 22 ► 


rithms, formalization of computing, and 
artificial intelligence. Turing was also 
instrumental in British code-breaking dur¬ 
ing World War II. 

■ The 2012 A.M. Turing Award includes a 
US$250,000 prize, with financial support 
provided by Google and Intel. 

■ The ACM will give the award to Gold¬ 
wasser and Micali at its annual Awards 
Banguet on June 15,2013 in San Francisco. 


Quick facts about the A.M. Turing Award 
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BY ALEX HANDY 

Tyler Jewell, CEO of Codenvy, recently 
received 9 million new reasons to 
believe in the browser-based Java IDE. 
Codenvy began as a side project for 
enterprise social Web framework eXo 
Platform, but in early March, Codenvy 
launched a beta for developers to try 
out around the world. 

Jewell is no stranger to enterprise 
Java development. His resume includes 
vice presidencies at Oracle and Quest, 
and a directorship at BE A Systems. We 
caught up with him shortly after 
Codenvy raised its initial US$9 million 
investment from venture capital firms 
Toba Capital and Auriga Partners, 
which clearly also believe in the power 
of a browser-based IDE. 

Jewell preaches Codenvy as a cure 
for the woes of IDE implementation. 
Typically, developers installing an 
IDE must configure their IDE to 
their liking; add in all the libraries and 
tools used in the enterprise; and link 
into the build, test and deploy sys¬ 
tems. That takes time, and Jewell sees 
a Web-based, easily replicable cloud- 
backed alternative as the solution. 


SD Times: What is the grand goal for 
Codenvy, say, five years from now? 

Jewell: We believe that in five years, 
there is no reason any new develop¬ 
ment should take place on the desktop. 
If you think about it, every application 
that runs and operates on the desktop 
has already moved to the cloud, with 
the exception of the developer work¬ 
bench. The reason is, oftentimes, 
developers are incredibly particular, 
and they’ve felt like they needed a spe¬ 
cialized environment. But we’re start¬ 
ing to realize that the problems that 
arise from developers working on the 
desktop are starting to mount up, and 
we can eliminate all those problems 
with a cloud-based development envi¬ 
ronment. 

Codenvy is taking the logical next 
step by taking the developer workspace 
and moving it into the cloud, making it 
scalable, sharable and clone-able. The 
net effect is that most developers can 
be more productive, in a number of 
ways, by developing in the cloud than 
they could have been on their desktop. 
We’re already starting to see the transi¬ 
tion; our growth is starting to kick in. 


We just crossed 50,000 users. 

It feels like your benefits are simi¬ 
lar to GitHub: sharing, cloning and 
forking in a public way. 

The parallels are the same. With 
GitHub, their focus is around the 
repository life cycle of that. In our 
world, the workspace itself is a combi¬ 
nation of the editor, the build process 
(which is a runtime), and a test process 
(which is also a runtime with access to 
the files that make up the project). 
Those files have been checked out into 
a construction phase. When we say 
cloning, we’re cloning all those ele¬ 
ments, the editor, its configuration and 
the state of those files. 

When I talk to you about clone-able 
components, we call that a factory 
URL. You can take a “Hello World” 
example and create a factory around 
that. We create a sandbox for someone, 
check out the “Hello World” applica¬ 
tion, compile it, validate that it has no 
errors, auto-create the account on 
Google App Engine, deploy the WAR 
file, and launch the debugger. The 
developer gets that in 30 seconds. That 
continued on page 18 ► 
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Codenvy's service works in the cloud, taking development off the desktop. 


Codenvy 

◄ continued from page 16 

would take four to six hours today. 

We can completely remove IDE 
issues from the planet. When I think of 
all the APIs ISVs are trying to on-board 
developers with, I think they’re doing it 
in the most painful way possible. 

What does the work look like to and 
from Codenvy? 

We provide Maven build capabilities. 
In the Maven build capabilities, you 
can refer to Maven Central, things can 
be downloaded locally, or you can 
upload your own. 

The version control is deferred off to 
your Git provider or your version 
provider. If you’re using Maven Cen¬ 
tral, they have versioning and team- 
based controls. You can do integration 
into any artifact repository, or Nexus 
server, or a private JFrog server as well. 
What languages are supported in 
Codenvy? 

Our emphasis is on the enterprise, par¬ 


ticularly teams with five to 20 people on 
them. As a result, a lot of what we’ve 
done is for those things that are com¬ 
piled languages: Java, Objective-C, C 
and C+ + . We don’t have full support for 
all of those, but we are building the 
workflow around those. 

We have language support for a wide 
range of interpreted languages. Fifty 
percent of our user base uses interpret¬ 
ed languages like PHP and Python. 
What’s next? 

We get about 20% of our traffic from 


developers who are using mobile 
devices of some sort. We don’t have 
mobile support yet, but I was blown 
away by guys saying, “I am on my 
iPhone.” That’s a huge amount of traffic. 

As a feature request, we’ve had 80 
votes to formalize tablet and touch sup¬ 
port. I think, “Why would someone 
want to build on their tablet?” But 
there are situations where people are 
on the couch, and they want to run to 
the desk, or they’re on vacation and 
have to change something. I 
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Heirloom puts new look on legacy 

Creates Elastic COBOL PaaS to run mainframe apps in the cloud 


BY SUZANNE KATTAU 

Companies often struggle with the 
question of how best to keep using their 
legacy mainframe COBOL applications 
(and the business knowledge built into 
them), but still keep their business agile 
and their costs low. Legacy moderniza¬ 
tion platform provider Heirloom Com¬ 
puting thinks the answer is to move the 
applications to the cloud on a pay-as- 
you-go basis. 

The company said its Elas¬ 
tic COBOL PaaS allows com¬ 
panies to securely run the 
exact same code, only paying 
for the time they need in the 
cloud. “Legacy modernization 
does orient around COBOL 
applications, typically running 
on mainframes,” said Heir¬ 
loom CEO Gary Crook. “But 
[they also run on] open sys¬ 
tems platforms as well. Its 
really the idea that you can 
take those high-value, trusted 
applications that have been 
running businesses—both 

transactionally and opera¬ 
tionally—for decades now, and 
repurpose those in new ways 
to create unique value to the business.” 

Crook created Heirloom with a team 
of executives from legacy moderniza¬ 
tion platform provider Micro Focus. 
They launched Heirloom years ago 
because they thought that Micro Focus 
needed to extend its reach into the 
cloud. But they claim that Micro Focus 
didn’t want to go there at that time. 

“Before Heirloom Computing, I was 
the Micro Focus executive responsible 
for product development worldwide,” 
Crook said. “Around mid-2009, I had 
moved back to California to work on 
establishing a new cloud division for 
Micro Focus. And as things do some¬ 
times, it didn’t go as planned. 

“At that time, the executive team at 
Micro Focus made a decision, which was 
to put their whole strategic focus on 
growing a software testing business, 


which came about through two recent 
acquisitions they had made. One was the 
Compuware testing product line, and 
the other one was Borland.” 

Crook said the Micro Focus folks 
decided that the strategic focus of the 
company going forward was going to be 
in the software testing business. “Con¬ 
sequently, myself and the other 
founders of Heirloom saw an opportu¬ 


nity then to innovate in the legacy mod¬ 
ernization space,” he said. “Not just 
around the COBOL stack, but more 
broadly also. And that’s the reason we 
started Heirloom. This was no kind of 
negative on Micro Focus at all; I had a 
great time working there, as did we all. 
It’s a great company. But we just felt 
that we saw an opportunity here that 
they weren’t going to be addressing.” 

Micro Focus' strategy 

Kevin Brearley, senior director of prod¬ 
uct management at Micro Focus, 
explained the company’s business goals 
much differently. According to him, 
Micro Focus bought Borland’s testing 
technology just to supplement its own 
legacy modernization efforts because of 
customer demand. 

“[Micro Focus’] foray into the testing 


market is purely to support our modern¬ 
ization strategy,” he said. “We’re not 
focused on testing. Because of the mod¬ 
ernization piece, we understand the 
COBOL really well. We’ve got the devel¬ 
opment tools to do it and the ability to 
move everything. So, to enhance that, 
[we] bought Borland and their testing 
technology just to augment that process.” 

According to Brearley, Micro Focus 
is still very much based on 
legacy application moderniza¬ 
tion. “[This means] changing 
them, enhancing them, mak¬ 
ing them mobile, putting 
them on different platforms, 
without changing the applica¬ 
tions much,” he said. “We 
want to keep [them] very 
close to the original because 
then we take out the risk and 
we do it a lot quicker. Our 
customers are more comfort¬ 
able with that than doing a 
rewrite or a replacement kind 
of strategy.” 

Heirloom is, likewise, 
focused on legacy applica¬ 
tions, typically COBOL, 
CICS and JCL applications, 
according to Crook. “What we do is we 
take those key components and we put 
them through [our Elastic COBOL], 
which is a traditional application-devel¬ 
opment and deployment product for 
COBOL that runs in Eclipse. And we 
compile them so they execute 100% as 
Java applications,” he said. 

Crook said targeting Java is so impor¬ 
tant because the one thing that unifies 
all the cloud platforms in the market is 
their Java execution layer. “We can take 
a mainframe COBOL, CICS, JCL 
application and run it, to date, on 11 dif¬ 
ferent cloud platforms,” he said. “And 
that’s simply because we target the Java 
platform first. Then the cloud platform 
runs that as a Java application.” 

While Heirloom modernizes COBOL 
legacy applications by changing the 
continued on page 24 ► 



Heirloom's cloud service does automated backups of systems. 
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Crittercism bolsters APM monitoring 

Company expands crash-reporting solution to deal with connectivity issues 
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The average daily app load distribution for the Top 10 most used Android and iOS devices. 


BY SUZANNE KATTAU 

Mobile app-monitoring startup Critter¬ 
cism has announced that two new service 
components to its mobile application 
performance-management (APM) soft¬ 
ware will be made available at the end of 
April. The solution, once limited to 
reporting on crashes, errors and the like, 
will be able to report on a mobile app’s 
performance as it relates to network con¬ 
ditions and third-party cloud services. 

“[The new part of the company’s 
APM solution is] the part that expands 
our transaction tracing to include a 
mobile apps interactions with its net¬ 
work, with external cloud services, if it 
makes any HTTP requests or any other 
type of network requests—basically 
how it interacts with the outside world,” 
said Andrew Levy, Crittercism’s CEO 
and cofounder. 

Why this solution, and why now? 
“There was really a big rush to build 
and to monetize on mobile,” said Levy. 
“Now that real businesses and revenue 
have emerged, they need the same type 
of infrastructure services that they 
would expect on their enterprise appli¬ 


cation stacks.” 

The demand for this is only growing, 
Levy said. “You hear a lot about fragmen¬ 
tation. There are way too many hardware 
and software permutations that compa¬ 
nies need to test on,” he said. “That’s why 
we don’t focus on testing. We have an 
end-user performance-management 
agent that the engineering teams inte¬ 
grate to really give them a real user view 
of what’s going on in their apps.” 

When it comes to fragmentation, it’s 


not just about Android, Levy said. “In 
the recent past, there have been at least 
three updates to iOS. And historically, 
we’ve seen about one update a month. 
And they are releasing a wider array of 
devices now. So, in terms of both hard¬ 
ware and software, there is a fragmen¬ 
tation story there. 

“Your app can be used anywhere in 
the world, by any number of carriers, by 
any number of devices and operating 
systems,” he said. I 


Apprenda adds Java to Platform-as-a-Service 


BY DAVID RUBINSTEIN 

Enterprise private Platform-as-a-Ser- 
vice, according to Apprenda CEO Sin¬ 
clair Schuller, is this era’s application 
server. “And that means two things,” he 
said. “Make management and deploy¬ 
ment of apps at scale easy, and make it 
easier for developers to build modern- 
architecture apps.” 

To meet those goals, Apprenda 
announced in March the ability to run 
Java applications on its platform—along 
with the .NET applications it already 
could run—to be better able to cover 
an organization’s application portfolio, 
Schuller said. 

He said first-generation Platform-as- 
a-Service providers, based on PHP and 
Ruby, were more focused on individual 


developers and were not looking at an 
enterprise use case. But, he noted, 
“Public Platform-as-a-Service did an 
amazing job of educating developers, 
and created developer demand inside 
the enterprise for private PaaS.” 

The advantages of private PaaS are 
well known. Organizations can keep 
their data secure, private and in close 
proximity. But the benefits of public 
PaaS—scalability, infrastructure cost 
savings, high availability—are equally 
well known. And, Schuller said, “We’ll 
see a meaningful transition of apps to 
public PaaS, but through a trusted 
provider.” 

For example, he explained users 
could point an Apprenda instance at an 
Amazon EC2 account, and the public 


and private resources merge in Appren¬ 
da. Then, he added, rules can be set for 
where the applications are deployed, 
which now, he pointed out, is a business 
decision. “We need a model like this to 
digest the question of where to deploy 
apps,” he said. 

Apprenda also announced that 
JPMorgan Chase is using Apprenda’s 
private PaaS to run its mission-critical 
application portfolio, made up of cus¬ 
tom Java and .NET applications. 
According to the company, Apprenda is 
deployed at JPMC production sites 
around the globe, running 2,000 Java 
and .NET applications across servers 
totaling 5.7 terabytes of memory, and 
are used by more than 430 develop¬ 
ment teams there. I 
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When good open-source projects go bad 

Fans aren't always happy when creators "sell out" to enterprises 


BY ALEX HANDY 

The music industry is where the con¬ 
cept began: Selling out was the end of 
your art, because big-money, big-label 
record deals would have to appeal to a 
wider, watered-down audience. This 
led to artists being accused by their ear¬ 
ly, rabid fans of selling their souls for 
money. But what happens when you 
sell your underground open-source 
project, and yourself, to a corporation? 

Indeed, if this were the music indus¬ 
try, Oracle would be the giant record 
label sucking the cool out of the band. 
Oracles acquisitions of Java, MySQL 
and dozens of other software projects 
have often been fraught with peril and 
complaints from the everyday users of 
these projects. 

Case in point: the Hudson project. 
When Oracle took the reins after its 
acquisition of Sun Microsystems, there 
was an almost immediate forking of the 
technology to keep it running outside of 
Oracles influence. The Jenkins project 
picked up where Hudson had left off in 
the open-source community. 

Its now been three years since that 
split occurred, and according to Hud¬ 
son (and Jenkins) creator Kohsuke 
Kawaguchi, the numbers show that 
Jenkins has clearly taken the mindshare 
from Oracle’s Hudson. 

According to a survey done by Zero- 
Turnaround, there is a clear winner in 
the split: Jenkins. The survey indicated 
that in 12 months, Hudson had 500 code 
commits, while Jenkins has had 1,200 
commits. And Jenkins showed 298 devel¬ 
opers contributing code to the project, 
while Hudson had only 10. 

Simon Maple, ZeroTurnaround 
technology evangelist, said the pattern 
of forking and moving on is repeated 
whenever a project is swallowed by a 
larger organization that the community 
feels isn’t focused on their needs. He 
said that this is how the community 
fights back when a less-than-philan- 
thropic company takes over coding 
duties for an open-source project. As an 


example, he cited Eclipse Foundation 
concurrency framework Vert.x. 

Vert.x was created by Tim Fox while 
he was at VMware, but he has recently 
moved to Red Hat, bringing with him 
concerns over copyright ownership of 
the project. “When Tim Fox moved 
from VMware to Red Hat...there was a 
lot of talk about forking the Vert.x proj¬ 
ect, and how that would affect the orig¬ 
inal project,” said Maple. “Although 
Vert.x and Jenkins are very different, it 
was very interesting following that to 
see the comparisons between the two. 

“What happened with Jenkins and 
Hudson meant that the Vert.x commu¬ 


nity were fine to have a fork if that’s 
what everyone wanted to do. They real¬ 
ized there’s a massive chance of the 
same thing happening because...the 
Jenkins/Hudson split has shown what’s 
possible in a community.” 

Rehabilitating illegal tools 

In 2003, HD Moore decided it was 
time to improve exploit implementa¬ 
tions for security audits. While exploits 
are released for dozens of systems every 
week, these bug reports typically 
amount to some sample code and a 
description of how to use it. That wasn’t 
enough for Moore. 

After a few years of work, by 2006, his 
Metasploit Framework was already the 
hottest tool in the hacker community. Its 
ease of use and wide variety of danger¬ 
ous payloads made it the darling of script 
kiddies and professional hackers alike. 
As Moore said at the time, “Metasploit 
both raises and lowers the bar.” 

In 2010, Moore was approached by 
Rapid7, a security penetration-testing 
firm. It wanted to hire Moore and pro¬ 


ductize Metasploit. He agreed, and for 
the past three years, Metasploit Pro has 
been selling like hotcakes. 

But what happens when you take your 
punk-rock application and sign up for 
distribution with Warner Bros. Records? 
Oddly enough, Moore said that the expe¬ 
rience has been transformative for the 
project. The big reason why Metasploit 
has survived corporate takeover is the 
exact reason many open-source projects 
aim to found a company: resources. 

“We were doing about five to 10 
exploits per month and only having 150 
unique exploits. Since then, we have 
over 1,000 exploits, and we add one a 


day. Sometimes we add two or three a 
day,” he said. 

That comes from having more devel¬ 
opers than Moore had when the project 
was just him and some friends on IRC. 
He said he was thrilled to have 20 
developers working full time on the 
project. “It’s more than I ever planned 
for,” he said. “Every metric has been 
through the roof, and we did it without 
alienating our open-source community.” 

Perhaps what’s more interesting 
about Metasploit’s acquisition isn’t the 
fact that a corporation decided to 
embrace and productize an open- 
source product, but rather the fact that 
a corporate entity was willing to invest 
in what was, without a doubt, one of the 
most powerful hacking tools available. 

“We had a lot of pushback saying, 
‘Bad people could use this!’ ” said Moore. 
“We’d already gone through six years of 
this battle in open source. We’ve made 
the case for disclosure, but that war has 
basically been won. It’s great to say I’ve 
spent the last 10 years working on Metas¬ 
ploit and I’m not in jail yet.” I 
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‘Every metric has been through the roof, and 
we did it without alienating our open-source 
community 

—HD Moore , Rap id 7 





22 , NEWS 


I SD Times | April 2013 | www.sdtimes.com | 



dtSearcK 


Instantly Search 
Terabytes of Text 

• 25+ fielded and full-text search types 

• dtSearch's own document filters 
support "Office," PDF, HTML, XML, 

ZIP, emails (with nested attachments), 
and many other file types 

• Supports databases as well as static 
and dynamic websites 

• Highlights hits in all of the above 

• APIs for .NET, Java, C++, SQL, etc. 

• 64-bit and 32-bit; Win and Linux 


U 


"lightning fast" Redmond Magazine 


"covers all data sources" 



> ■ 

"results in less than a second" 

InfoWorld 

hundreds more reviews and developer 
case studies at www.dtsearch.com 


dtSearch products: 

Desktop with Spider ♦ Web with Spider 

♦ Network with Spider ♦ Engine for Win & .NET 

♦ Publish (portable media) ♦ Engine for Linux 
Document filters also available for separate licensing 

Ask about fully-functional evaluations 

The Smart Choice for Text Retrieval® since 1991 

www.dtSearch.com 1 - 800 -IT-FINDS 


2012 Turing Award 

◄ continued from page 15 

ly, defined in the 1940s. [Shannon was an American mathemati¬ 
cian, electronic engineer and cryptographer]. He defined secu¬ 
rity with respect to [an adversary] who has an infinite amount of 
power, infinite amount of time, and infinite amount of space, 
and where there is enough information in the system for him to 
then figure out anything about the message. When we talk 
about computational security, we say, well, actually, the enemies 
out there don’t have infinite amounts of time and space. So you 
define security with respect to these adversaries.” 

Goldwasser and Micali’s advances led to the notion of inter¬ 
active and probabilistic proofs, and had a profound impact on 
computational complexity, an area that focuses on classifying 
computational problems by their inherent difficulty, according 
to the ACM. 

The two researchers began working together as graduate 
students in 1980. They collaborated on an influential comput¬ 
er science paper, “The Knowledge Complexity of Interactive 
Proof Systems,” published in 1989. In it, Goldwasser said they 
came up with a new way to prove mathematical statements. 

“Think of practical proofs as something you read in a book 
and you verify them line by line,” she said. “But the method 
that we came up with consists of interaction between the 
truth statement and then checking if the proof is correct. It 
was essentially a series of questions and answers. 

“So, we have these interactive proofs where the person 
who’s checking is choosing a random question based, of 
course, on the statement, to ask the proven If the prover gives 
an answer, then you ask another question. You’re trying to find 
the mistake, but you never do. You accept this as overwhelm¬ 
ing evidence that there is proof and the statement is correct.” 

Goldwasser said that what was interesting and new about 
this concept was that it enabled convincing someone of the 
correctness of the statement without giving away anything 
extra. “And that’s extremely relevant to cryptography 
because, when we’re working with many parties in an inter¬ 
active protocol like the one that involves many parties on the 
Internet, parties which we don’t trust, we would like to get 
proofs that they’re sending the correct information,” she said. 

Given their unique insight into cryptography and security, 
they see reducing or even removing interaction as the next fron¬ 
tier in the computing field. 'Whatever Shafi and I can actually 
ever claim and be proud of is to have shown [how] interaction 
augmented and improved security,” said Micali. “That some¬ 
how, the more interactive, the more privacy you could maintain. 

“But now, having done that, I really believe that [going for¬ 
ward it will be about] how much security can you achieve if you 
want to reduce interaction. Because very often you are not 
around to interact, and you want to put something into the 
world that works on your behalf. But it can no longer interact 
with you, and you still want to guarantee security. I think it’s a 
very crucial equation, and there’s going to be a lot of mathe¬ 
matics to do and modeling to do in order to solve it.” I 
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FoundationDB takes transactional path 

ACID-compliant NoSQL differentiates its approach from its competitors 


BY ALEX HANDY 

FoundationDB isn’t some new non¬ 
profit, nor is it a new book from Isaac 
Asimov. It’s actually a new database and 
company that’s pushing transaction and 
ACID compliance into the NoSQL fray 
So focused on the transactional under¬ 
pinnings of the database are its creators 
that they don’t even call it a database: 
They refer to it as a storage substrate. 

David Rosenthal, cofounder of Foun¬ 
dationDB, said the project was started in 
2009 to solve the problem of highly scal¬ 
able transactions in cloud data stores. 

“We talk about it as a storage sub¬ 
strate,” he said. “At its core, it’s a key-val¬ 
ue store, where you have a binary key 
and a binary value. It keeps its keys in 
sorted order, so it supports sufficient 
range operations. The big differentiator 
is [that] unlike every other NoSQL, we 
have full ACID transactional guarantees. 
There’s no funny business, no asterisk, 
no reduced isolation levels, no transac¬ 
tions that can only contain certain keys. 
A transaction can take any keys.” 


Thus, FoundationDB can handle 
high volumes of data and transactions 
without losing information in the fray. 
This is a major change from other 
NoSQL databases, such as MongoDB, 
which has placed a higher priority on 
performance scalability over transac¬ 
tional reliability. Many have comment¬ 
ed on this as a liability of MongoDB 
and other NoSQL storage systems. 

“A lot of people also use the word 
'ACID’ if you dig deep enough, but 
really the strongest guarantee any 
NoSQL makes is that you can some¬ 
times do transactions on a single data 
element within the database, not span¬ 
ning data elements,” said Rosenthal. 

“The way I describe it is, if MySQL 
turns one computer into one database, 
sharding turns N computers into N 
databases. NoSQL is about turning N 
computers into infinity databases. Each 
little data element is its own data ele¬ 
ment with its own internal consistency 
and no consistency to the other ones.” 

FoundationDB officially launched 


its public beta on March 4. Rosenthal 
hoped that many developers attempt¬ 
ing to build scalable storage back ends 
to their cloud-based applications will 
see benefits from FoundationDB. Why 
does he think they’ll find it useful? 
Because Google did it first, he said. 

“This whole NoSQL thing got kicked 
off when Google put out papers on GFS, 
Map/Reduce and BigTable,” said Rosen¬ 
thal. “Those kicked off the NoSQL 
world five years ago. Pretty much every¬ 
body copied those papers. Google said, 
'We’re going to optimize for scalability.’ 

“The really interesting thing is that, 
a few months ago, they published their 
paper about Spanner, which replaced 
their first-generation NoSQL. Spanner 
has full transactions across data ele¬ 
ments and multi-key transaction 
integrity. Google said in that paper, 'We 
have the best and brightest, but out 
engineers have a hard time building 
applications on top of these databases 
with weak consistency models.’ What 
they really want is transactions.” I 


JNBridge now spans to Mono on Linux 


BY DAVID RUBINSTEIN 

Looking to expand its footprint, 
JNBridge in March announced the 
release of JNBridgePro 7.0, with sup¬ 
port for the open-source Mono project 
that now enables organizations to run 
.NET applications with Java compo¬ 
nents on a Linux server. 

But getting there was no trivial mat¬ 
ter, according to Wayne Citrin, CTO of 
JNBridge. 

“Novell had reached out to us over 
the years and said it wasn’t hard, that the 
APIs were well supported,” he recalled. 
But when JNBridge started engineering 
the project, it found “a couple of places 
where the APIs were incomplete, so we 
had to code around that or not support a 
particular feature. Thankfully, they 
weren’t critical features.” 

Citrin also noted that Mono, a repli¬ 


cation of Microsoft’s .NET Framework, 
is stricter in certain cases than .NET. 
“Mono gave you a stricter, more correct 
way, while .NET was more forgiving. So 
in that regard, Mono was narrower,” he 
said. 

“Yet in certain cases, like handling of 
XML and HTTP, Mono did it incorrect¬ 
ly. So our SOAP was not entirely cor¬ 
rect, but .NET, which was more forgiv¬ 
ing, handled it fine, but you had to add 
the error for Mono to handle it.” 

JNBridgePro enables users to run 
Java- and .NET-based applications 
together while taking care of the under¬ 
lying complexity of interoperability. The 
new release, with Mono support, 
enables scenarios where organizations 
might want to run legacy ASP.NET 
applications on a Linux server while call¬ 
ing to a back-end Java EE server, such as 


IBM WebSphere or Oracle WebLogic. 

“Both .NET and Java are pretty 
entrenched now,” Citrin said. “In a lot of 
cases, organizations don’t have a choice 
but to create hybrid applications.” JN¬ 
BridgePro only supports Mono running 
on Debian, openSUSE and Ubuntu. 

The new release also reduces confu¬ 
sion over what Citrin called “bitness” by 
including all 32-bit and 64-bit compo¬ 
nents in a single installer. “Users can cre¬ 
ate apps that will run as either 32-bit or 
64-bit and use shared memory,” he said. 
“Previously, this required two builds.” 

Citrin said JNBridge is also looking 
at opportunities in the mobile space, 
and support for Mono is key to that. 
“Mono has additional tools for .NET 
code running on Android and iOS,” he 
said. “But it’s just something that we’re 
looking at for now.” I 
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MongoDB 2.4 addresses search concerns 

Update to NoSQL includes better defaults to avoid data loss issues 


BY ALEX HANDY 

NoSQL database MongoDB got a major 
update from lOgen, its creator, in 
March. Version 2.4 of the database 
includes new tools to help with the scal¬ 
ing process, as well as better default set¬ 
tings that should help prevent data loss 
for users unfamiliar with the system. 

Kelly Stirman, director of product 
marketing at lOgen, said that version 
2.4 was built to address many of the 
concerns MongoDB users have 
expressed in the community. Specifical¬ 
ly, he said that the community had long 
been asking for full text search to be 
embedded in the database. 

“Its been one of the most frequently 
requested features since the launch of 
the project,” he said. “If you have a 
MongoDB application, in the past, 
you’ve needed to integrate with Solr, 
Lucene or ElasticSearch, or a commer¬ 
cial technology. It’s no surprise a lot of 
developers just wanted this to be part of 
the database.” 

Stirman said that the search capabili¬ 
ties added to MongoDB 2.4 are not a 
panacea. It does not have “everything 


you could ever need in search, but we 
think that for a lot of people, the feature 
will be good enough. There will still be 
users who have more sophisticated needs 
for search, and they will integrate with a 
separate search technology,” he said. 

Version 2.4 also includes new tools 
designed to help administrators and 
developers better scale MongoDB. 
One of the sticking points for scaling 
MongoDB was around trying to deter¬ 
mine which data should be stored in 
RAM and which should live on the disk. 

“[MongoDB] didn’t always know 
what your working set was,” said Stir¬ 
man. “People would say, 'What’s my 
working set?’ There are ways to triangu¬ 
late it. Now, we have a feature in 2.4 
that helps you understand what the 
working set is. That will help with 
capacity planning.” 

In addition to performance 
enhancements, new hash-space shard- 
ing capabilities, and the introduction of 
a new Enterprise edition, the big 
“gotcha” for new users has also been 
addressed, said Stirman. 

That gotcha has been the database’s 


default level of write concern. “Histori¬ 
cally, we have supported different levels 
of write concern. If you want to write 
data for MongoDB, one end of the 
spectrum is T don’t care if I lose this,’ 
and the other end is 'Under no circum¬ 
stances should this be lost.’ Our drivers 
allowed the developer to specify the 
level of concern on write. The default 
for drivers was relatively low. We’ve 
changed the defaults in Mongo client,” 
said Stirman. 

That means data won’t be vanishing 
out from under beginner users. While 
having the option to set write concern is 
useful for developers writing large-scale 
applications, traditional developers 
coming to MongoDB from the world of 
relational databases had been blind¬ 
sided by the unexpected loss of data. 

MongoDB 2.4 also includes dozens 
of other updates, such as a free moni¬ 
toring service based in the cloud, and a 
new standardized set of language inter¬ 
faces for enterprise developers. The 
new version also introduces a third tier 
of pricing aimed at enterprises, which 
includes 24x7 support. I 


Heirloom's new 

◄ continued from page 19 

COBOL code into Java, Micro Focus 
said that this is not needed. “A lot of peo¬ 
ple will look at it [and say it’s] got to be in 
Java or something sexy like that,” said 
Brearley. “That it’s got to be new, con¬ 
temporary and so on. But that’s not true. 

“Micro Focus has tens of thousands of 
customers out there, for many years, and 
they’ve written applications using 
COBOL. What Micro Focus does is pro¬ 
vide them the environment [where] they 
can take those COBOL applications for¬ 
ward without having to change them. 
What I mean by that is, we can run 
COBOL applications on Windows, on 
Linux, on Unix, etc. We can run COBOL 
applications in the cloud today [as well].” 
Going forward, both companies 


look on legacy 

agree that there will always be a need to 
modernize those COBOL application 
infrastructures and make them more 
agile. “When you boil it down...it really 
is about making the business more 
agile,” Crook said. “And you can’t do 
that in today’s competitive environment 
by simply maintaining your existing 
infrastructure, existing data centers and 
the old way of doing business. You have 
to find ways to liberate those high-value, 
trusted systems in new and different 
ways because the market’s changing.” 

Crook believed that cloud comput¬ 
ing is the future for this. “I think most of 
the industry agrees as well, [that success 
in keeping your business agile] is going 
to be around how you embrace the ben¬ 
efits of cloud computing,” he said. I 



Heirloom's Gary Crook says that porting 
legacy apps to Java allows them to work on 
many cloud platforms. 
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Heroku shines 
light on Ruby 2.0 

Language's creator talks about its future 


BY ALEX HANDY 

PaaS company Heroku doesn’t do con¬ 
ferences like the rest of the software 
industry. Waza, Heroku s developer con¬ 
ference in San Francisco in March, 
opened with traditional Japanese music 
and Taiko drums. Riding in on all of this 
pomp and circumstance was the creator 
of Ruby on hand to discuss the new ver¬ 
sion of that programming language. 

Officially released on Feb. 24, Ruby 
2.0 is the culmination of a decades 
worth of work by Yukihiro Matsumoto, 
the language’s creator and chief archi¬ 
tect of Ruby at Heroku. 

“Some of the fundamental features, 
like keyword arguments and enabling 
method combination and refinements 
for monkey-patching, all of them are 
presented as I explained in the keynote 
speech in RubyConf in 2003,” said Mat¬ 
sumoto. “That was 10 years ago, so the 
basic idea was in mind for 10 years.” 

(Monkey-patching is the term for 
modifying runtime code in a dynamic 
language program without modifying 
the actual source code. In other words, 


it’s slapping fresh code on an already 
running application, without writing 
said changes into the source code.) 

Yehuda Katz, member of the Ruby 
on Rails and jQuery Core teams, 
explained the refinements in a blog 
entry: “The first thing you need to 
understand is that the purpose of refine¬ 
ments in Ruby 2.0 is to make monkey¬ 
patching safer. Specifically, the goal is to 
make it possible to extend core classes, 
but to limit the effect of those exten¬ 
sions to a particular area of code.” 

Elsewhere in Ruby 2.0, Matsumoto 
added named arguments, selector name- 
spaces, and multiple inheritance. The 
Ruby interpreter was also improved, 
with sandboxed virtual machines, better 
compatibility with non-Unix environ¬ 
ments, and better overall performance. 

For Matsumoto, Ruby 2.0 was about 
refocusing Ruby on what it has become 
rather than what it was designed to be. 
“Ruby was originally started as a script¬ 
ing language, so the typical Ruby pro¬ 
gram was very small,” he said. 

“Nowadays, the Ruby code is bigger 



and bigger since the Web applications 
are much bigger than scripting-lan¬ 
guage applications, so we have to han¬ 
dle the scale of the programs properly. 
Most of the features we added to Ruby 
2.0 are there to enable the scalability on 
both sides, and I think they enhance 
the flexibility of the software.” 

As for the future of the language, 
Matsumoto was optimistic about its core 
and syntax. These components didn’t 
need much refinement or work, he said, 
rather it needs to continue becoming 
more flexible. To this end, he said he’d 
like to add better Unicode support. I 


needed for mobile device tests 


No jailbreaking 

BY SUZANNE KATTAU 

Automated software testing solution 
provider TestPlant announced in March 
the upcoming release of eggOn, a new 
mobile component of eggPlant, the 
company’s test-automation tool. The 
company said eggOn is different from 
other mobile application testing solu¬ 
tions because it’s an on-premise solution 
that gives developers full control of 
mobile devices during application test¬ 
ing, without the need for jailbreaking. 

“When you jailbreak a phone, you are 
essentially subverting the operating sys¬ 
tem and changing the behavior of the 
phone,” said Antony Edwards, CTO of 


TestPlant. “So if you then test your appli¬ 
cation on a jailbroken phone, you really 
are testing it in a compromised environ¬ 
ment. Most corporate developers just 
simply won’t allow testing on jailbroken 
devices because it’s not representative of 
what their users are doing.” 

eggOn can run tests across all operat¬ 
ing systems and mobile devices. It uses 
image-recognition technology to recog¬ 
nize device displays. And because it is an 
on-premise solution, the company said 
eggOn gives developers a wider range of 
tests to perform on mobile devices. 

“There are a number of hosted tools 
for app testing available on the market 


today, but these are limited in terms of 
the range of tests that can actually be per¬ 
formed,” Edwards said. 

He said that eggOn is different from 
other testing tools because it gives 
developers full control of the devices 
during testing. “A lot of test solutions 
will let you test your application on the 
device,” he said. 

“Rut you can’t interact with the 
iPhone as a whole. You can’t pull down 
the notification screen, you can’t go 
back to the main menu and then jump 
back to the application... And this really 
restricts the different kinds of tests you 
can do on your application.” I 
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New PHP server wrappers enable developers used to server-side programming to use Kendo Ul. 

Telerik wraps Kendo Ul 
with PHP, Windows Phone 8 



BY SUZANNE KATTAU 

Ul component and developer tool 
provider Telerik announced in March 
the Spring 2013 release of Kendo Ul, 
its framework that helps developers 
build JavaScript and HTML5 websites 
and mobile apps. 

The first of three planned major 
releases for the year, the Spring 2013 
release includes new PHP server wrap¬ 
pers, as well as added support for Win¬ 
dows Phone 8 and the modern Web 
Single Page Application (SPA) architec¬ 
ture. SPA architecture, the company 
said, helps developers create modular 
and maintainable Web applications. 

With its new Windows Phone 8 sup¬ 
port, the company said Kendo Ul helps 
developers create mobile Web and 
hybrid mobile apps across all major 
mobile platforms. One of the things that 
Kendo Ul did not have support for, up to 
this point, was Windows Phone. “That 
was primarily because Windows Phone 7 
didn’t really provide a capable-enough 
HTML5 runtime to make this work,” 
said Todd Anglin, executive VP of cross¬ 
platform tools and services at Telerik. 

“Fortunately, Windows Phone 8 does 
have that capable runtime. So in this 
release, we’re adding Windows Phone 8 
support in addition to the existing iOS, 


Android and BlackBerry support.” 

The company also said Kendo Ul is 
now the only front-end framework to 
offer server-side wrappers for 
ASP.NET, PHP and JSP With the new 
PHP wrappers, the company said 
developers can build modern HTML5 
apps without hand-coding JavaScript. 
They simply code in their preferred 
server-side language, and Kendo Ul 
renders the JavaScript needed to power 
its widgets and framework features. 

“Kendo Ul channels developers’ 
HTML wish list into one framework, 
enabling them to leverage either 
JavaScript or familiar server-side pro¬ 
gramming to deliver rich, Web and 
hybrid mobile apps that run across all of 
the major platforms,” Anglin said. 

This release also delivers the most 
new Web and Ul widgets and chart 
types since the original Kendo Ul 
release in November 2011, the compa¬ 
ny said. 

In addition, to assist developers 
interested in integrating Kendo Ul with 
other JavaScript libraries, the company 
said a new Kendo Ul Labs site has been 
launched to incubate open-source inte¬ 
grations with projects such as Angular- 
JS and Breeze.js. The Labs opened last 
month at labs.kendoui.com. I 


In other component news... 

Document, content and imaging solu¬ 
tion provider AccuSoft has released 
ThinPic for Android, an application that 
lets developers reduce photo file sizes 
without compromising resolution or 
image quality. Using ThinPic, iPad, iPod 
and now Android device users can store 
many high-resolution photos on their 
device or cloud-storage services. The 
ThinPic technology has also been 
expanded to include Facebook integra¬ 
tion for the iOS app and Web access to 
the technology using JPEGWizard.com, 
the website AccuSoft recently launched 
that lets developers reduce photo file 
sizes. 

File format solution provider Aspose 
has released the Aspose Visual Studio 
Plugin 1.0.0 and the Aspose Eclipse Plu¬ 
gin. The Aspose Visual Studio Plugin is 
for developers who want to try out 
Aspose .NET components without leav¬ 
ing their Visual Studio IDE. The Aspose 
Eclipse Plugin is for Java developers 
who do not want to leave their Eclipse 
IDE to try out Aspose Java components. 
Using this plug-in, developers can 
download components and explore 
libraries for document manipulation. 

Atalasoft, a Kofax company, has 

released Atalasoft Dotlmage 10.3, a 
.NET imaging SDK that lets developers 
view, capture and annotate images and 
PDFs. The Web document viewer is now 
supported on iOS Mobile Safari and 
Android's Chrome browser. It now 
includes a JavaScript API for creating 
annotations, altering context menus, 
changing the properties of an annota¬ 
tion, and changing the current page. 

PDF component solution provider 
XFINIUM Software has released XFINI- 
UM.PDF 3.1, a cross-platform PDF devel¬ 
opment library for .NET and Mono. The 
toolkit lets developers create PDF files 
and PDF portfolios; create, fill and save 
PDF forms; merge and split PDF files; 
perform content encryption/redaction; 
and has a built-in vector barcode 
engine. I 
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Agile development and continuous delivery enlists 
both developers and IT. Does the cloud present 
a minefield that businesses need to navigate? 


BY ALEXANDRA WEBER MORALES 


dmit it: You think of opera- 
tions, and that dated stereotype 
A^^^of a bearded guy in a dusty data 
center still pops up. And even though 
“development” isn’t that much of an 
improvement over its predecessor, 
“programming,” it beats the utilitarian 
sound of “operations,” right? Perhaps 
you have even begun to believe the 
hype: The cloud will eliminate most of 
your deployment concerns. 

“I can’t tell you how ripped I get 
when people say things like this: ‘Cloud 
computing means getting rid of ops,’” 
said John Allspaw back in 2009. “If by 
‘ops’ you mean people in data centers 
racking servers, installing OSes, run¬ 
ning cables, replacing broken hard¬ 
ware, etc., then sure, cloud computing 
aims to relieve you of those burdens.” 

Now senior vice president of techni¬ 
cal operations at Etsy, Allspaw is the 
author of “The Art of Capacity Plan¬ 
ning: Scaling Web Resources,” a title 
that belies his gift for making the con¬ 
cepts in the book a zillion times more 
interesting than you might think. A 
seminal figure in the DevOps move¬ 
ment, he is perhaps best known for his 
2009 O’Reilly Velocity conference pres¬ 
entation describing continuous delivery 
(10 deploys a day) at Flickr. 

From a developer-centric stand¬ 
point, DevOps is all about operations 
matching the breathtaking productivity 
of agile coders who have achieved sym¬ 
biotic nirvana with the business and/or 
customers. Really, the only thing slow¬ 
ing developers down are those obtuse 
IT admins. Worst of all, companies are 
trying to staff DevOps teams and engi¬ 
neers—titles that continuous delivery 
guru Jez Humble and others said are 
missing the point. 


“Why does the community hate the 
term ‘DevOps team’? The objection 
fundamentally is that DevOps teams 
could be another silo,” said Eric Minick, 
technical evangelist for UrbanCode. 
Maker of the AnthillPro build, deploy, 
test and release-automation framework, 
as well as the uDeploy application- 
deployment automation tools, it’s fair to 
say UrbanCode sees DevOps through 
developer-colored glasses. 

“Politically, especially where agile 
has gone well, development has estab¬ 
lished a pretty good relationship with 
the business. So ops has a bit of an exis¬ 
tential threat,” Minick said. 

Election 2012: Gameday prep 

While this existential debate was raging 
on Twitter and in conferences around 
the world, a tweet on Nov. 12, 2012, by 
Scott VanDenPlas put everything in 
perspective: 

“4Gb/s, 10k req/s, 2k nodes, 3 data¬ 
centers, 180TR and 8.5 billion req. 
Design, deploy, dismantle in 583 days 
to elect the President. #madops” 

Agree with his title or not, VanDen¬ 
Plas spent May 2011 through November 
2012 making history as “DevOps Direc¬ 
tor” at Obama for America. Was Presi¬ 
dent Obama’s reelection campaign tech¬ 
nology operation as big of an 
achievement as, say, Amazon’s massive, 
multi-year service-oriented architecture 
makeover? Technically, no, but in every 
other respect—visibility, time and mon¬ 
ey constraint, star-studded staffing, and 
ability to affect the lives of 300 million 
Americans—it was a game-changer. 

“Obama 2012 didn’t have the magic 
of hope and change. What it did have 
was a relentless focus on operational 
excellence and massive scale,” accord¬ 


ing to the Engage Research report 
“Inside the Cave: Obama’s Digital 
Campaign.” Reports in The Atlantic, 
Ars Technica, InformationWeek and 
more gushed over the work of the elite 
team of 50 Silicon Valley-and-beyond 
experts under the Obama campaign’s 
CTO Harper Reed. Head-to-head com¬ 
parisons between Obama’s and Rom¬ 
ney’s technology showed a clear victory: 
While candidate Mitt Romney’s out¬ 
sourced effort failed or degraded on 
Election Day due to poorly planned 
PDF mailings, Obama for America had 
undergone ruthless testing on Oct. 21 
and ran smoothly through election day. 

“‘Game Days’ were disaster-pre¬ 
paredness exercises where DevOps 
simulated nightmare scenarios, such as 
a catastrophic database failure or Ama¬ 
zon’s East Coast data center going 
offline,” said Reed in published reports. 
“It’s not enough to have it in a manual. 
The lesson of DevOps is that you actu¬ 
ally have to practice and practice disas¬ 
ter recovery scenarios until you have 
them down cold. 

“We knew what to do. We had a run- 
book that said if this happens, you do 
this, this and this.” 

And it wasn’t just disaster they were 
averting: Traffic surges were fast and 
furious. An hour of downtime could 
cost millions in lost donations, with the 
campaign’s donation peak being US$3 
million collected in one hour. 

It’s an overstatement to say DevOps 
was the key determinant of victory in 
the president’s tripartite strategy com¬ 
bining digital (content), technology 
(apps and infrastructure) and data ana¬ 
lytics. Rut companies are increasingly 
discovering that VanDenPlas had a 
continued on page 32 ► 
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point when he tweeted, post election: 
“Operational efficiency is an enormous 
strategic advantage.” 

Streaming past agile 

“When I start seeing banks, enterprises, 
financial institutions—brand names my 
grandmother had heard of—saying 
they’re doing continuous delivery, that’s 
a big change,” said Steve Brodie, who 
recently left application life-cycle man¬ 
agement vendor Serena to head up 
Electric Cloud, a maker of build and 
deployment tools. “It’s no longer just 
these websites; it’s an aspirational mod¬ 
el for the enterprise, looking at how 
they can adopt this and move up the 
maturity curve.” 

But the view from Electric Cloud 
and UrbanCode is still through dev 
goggles. What’s interesting is that as 


agile has become mainstream (not nec¬ 
essarily perfectly implemented every¬ 
where, but well understood and docu¬ 
mented), there’s not much new to say 
about it, especially when all the empha¬ 
sis is on driving speed downstream or 
enabling continuous delivery. 

Enter Christopher Brown, CTO of 
Opscode. He’s a man who casually 
deploys “gestalt” and “phenotype” in 
conversation; his excitement crackles 
over the phone as he describes his Seat¬ 
tle-based company’s impending second 
annual user conference. Facebook pro¬ 
duction engineer Phil Dibowitz will 
reveal how the world’s biggest social 
network uses Opscode Private Chef to 
manage Web-tier infrastructure config¬ 
uration. Disney, General Electric, 
Nordstrom and Riot Games are among 
the more than 30 companies that will 
present on their use of Chef in IT oper¬ 
ations, cloud architecture and applica¬ 


tion development. 

When asked if DevOps is emerging 
solely as a response to rapid application 
development, Brown scoffed. “The 
notion that software engineering is 
pushing downwards? It’s the opposite: 
IT pushes upwards. Operations is driv¬ 
ing big IT,” he said. 

While some DevOps tool vendors 
have a history in development, he said, 
“We came at it from another direction: 
the notion that the folks in operations 
are becoming more and more impor¬ 
tant in business because of the rate of 
change in business. You see orders-of- 
magnitude growth, and suddenly oper¬ 
ations is at the forefront of business.” 

Infrastructure as code 

Operations may be in the limelight, but is 
it a job for people, or just tools? When 
Patrick Debois coined the term DevOps 


around 2009, he was trying to elevate the 
status of multidisciplinary sys-admin 
coders who regularly release software to 
customers. Do these admin coders exist? 

“When we go into potential deals, 
we try to identify a champion. That 
champion is almost always a coder on 
the infrastructure side of the house,” 
said Brown. “I know the phenotype 
exists because the Velocity conference 
was designed for this person.” 

What’s more, Brown was eager to 
dispel the stereotype of the old-school, 
low-skill admin. With the redefinition 
of infrastructure as code that’s under¬ 
way in tools like Chef and Puppet, “We 
tell these ops guys, ‘You’re writing code 
too. This notion that you’re not a soft¬ 
ware guy is wrong. You version and 
deploy in exactly the same fashion the 
developers do.’” 

Brown pointed to luminaries such as 
Theo Schlossnagle, CEO of OmniTI. 


“Theo has a Ph.D. in computer sci¬ 
ence,” he said. “You ask him what he 
does and he says, Tm a sys admin.’ He 
identifies with that pack.” 

Another thinker is Mark Burgess, 
CTO and principal author of the open- 
source configuration management sys¬ 
tem CFEngine, which celebrates its 
20th anniversary in 2013. As professor 
of network and system administration 
at Oslo University College until 2011, 
he focused on automation and policy- 
based management. In the 1990s, he 
described idempotent, autonomous 
desired state management (“conver¬ 
gence”), and in the 2000s he explored 
cooperative systems (“promise theory”). 
In his USE NIX series of articles from 
2006 to 2007, he explored “Configura¬ 
tion Management, Models and Myths” 
and, like Allspaw, shined a light on the 
nuance and skill that operations entail. 

“There’s lots of math, elements of 
distributed systems theory, scaling out 
concurrent Web operations, thread 
affinity and cache coherency on the 
processor... The skillset required to 
leverage all this is actually staggering,” 
said Brown—with humility to match 
any developer. 

Who, me? DevOps? 

Humble gets it, of course, and has col¬ 
laborated with Allspaw, Debois and 
others in the DevOps space. But even 
he railed in an October 2012 blog post 
against labeling or hiring so-called 
DevOps teams, arguing that it would 
increase handoffs to functional silos. 
He moderated his advice, however, 
with the following caveat: “I lied when 
I said there’s no such thing as a DevOps 
team. For developers to take responsi¬ 
bility for the systems they create, they 
need support from operations to under¬ 
stand how to build reliable software 
that can be continuously deployed to an 
unreliable platform that scales horizon¬ 
tally... Somebody needs to support the 
developers in this, and if you want to 
call the people who do that the 
'DevOps team,’ then I’m OK with that.” 

In Humble’s estimation, developers 
today should learn how to do packaging, 
deployment and post-deployment sup- 
continued on page 34 ► 
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support from operations.’ 

E 

—Jez Humble, ThoughtWorks 
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Enabling large enterprises to innovate at 
the speed of start-ups 


While DevOps is an approach and not a set of tools, the adoption of 
the DevOps philosophy can be greatly aided by having the right tools. 
UrbanCode has been providing tools that are aligned with DevOps for over 
a decade. UrbanCode tools work together and with other popular tools to 
standardize and automate manual tasks, giving you a continuous delivery 
pipeline from development to operations, and all the way to production. 
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◄ continued from page 32 

port. But the expectation, 
as he described, sounds a bit \\ 
like the old joke about a lonely vW 
mans classified ad: “Looking for V \ 
a good woman who’s kind-hearted, \ \ 
cooks well and has a speedboat. \ 
Send picture of the boat.” \ 

No longer a wallflower, operations is 
experiencing an explosion of possibili¬ 
ty. “I think of it as an expansion in the 
job roles going from basic systems 
administration to really what we call 
infrastructure engineering,” said Jesse 
Robbins, founder of Opscode, in a May 
2012 O’Reilly Radar interview. “The 
road ahead for everybody who builds 
and maintains infrastructure or applica¬ 
tions in software looks like building a 
very powerful software platform.” 

And the DevOps job titles? They are 
popping up on the job boards. Pager- 
Duty is a San Francisco-based startup 
whose advertisement for a senior 
DevOps engineer reads in part, “You’ve 
pulled back the covers and know how 
this Internet thing works end to end. 
Networks, servers, protocols, operating 
systems, services, databases, query opti¬ 
mization, disks: to you nothing is a 
'black box.’ If necessary, you can debug 
performance problems through the 
whole stack.” 

The ad continues: “You subscribe to 
the theory that operations engineering is 
about writing software to manage 
machines, and the thought of SSHing 
directly to a machine to adjust a conf file 
strikes you as... distasteful.” Among the 
critical concepts PagerDuty wants its 
DevOps engineers embracing are con¬ 
tinuous integration servers, push-button 
deploys, time-series data stores, metrics 
dashboards and centralized logging. 

“That’s a pretty bad smell, someone 
advertising for a DevOps position. If I 
were responding to that ad, I’d have 
some pointed questions about how they 
see that role,” said UrbanCode’s 
Minick, who also noted that skillsets 
like those PagerDuty is hiring for are 
difficult to find. 

“Am I going to be the DevOps person 
on the team, or facilitating with others? 
Companies are struggling to hire those 

continued on page 36 ► 



DevOps Tools: 
not Quite in the Cloud 

Would DevOps exist without cloud computing? In a Forrester survey on continuous 
delivery commissioned by ThoughtWorks and released in March, 44% of IT leaders 
reported automating software deployment, and 41% provided 
developers with access to self-provisioned resources, like a 
public or private cloud. Only 17% of respondents deployed 
daily to cloud services; 24% did so weekly. Nearly 40% 
rarely or never deployed to the cloud. 

"The bulk of our customers are deploying to their 
own private environment," said Steve Brodie, CEO of 
Electric Cloud, who pointed out that more enterprise 
customers are deploying for testing. "In some percent¬ 
age it's a private cloud, and in a small percentage of customers it's the 
public cloud. These tend to be websites, e-commerce or retailers, or ISVs 
that have SaaS-based applications. 

"Many customers, when they move to DevOps, are trying to reduce time to market 
by automating the entire process from check-in through build and release." 

Electric Cloud contended that there's a cost to being slow. Its return-on-investment 
calculator walks through some averages: Initial deployment failure may happen 10% 
to 20% of the time. There are typically four developments a year. It may take four to 
eight person-hours to deploy a Java update, but there are also manual updates that 
take hundreds of steps. Then there are time-to-market, customer retention and uptime 
advantages. The costs the deployment tool will save by defining thresholds for deploy¬ 
ment failures and speeding the process, the company claimed, can be staggering. 

Brodie, who recently left Serena, characterized Electric Cloud as having a unigue 
advantage as an end-to-end tool. He laid out the landscape as starting with developer 
application life-cycle management: Companies such as Serena, Atlassian or Rally. 
Then there are infrastructure tools such as VMware and AWS. Puppet, Chef and 
CFEngine take care of configuration management. Finally there's IT management, 
such as Service Now. "We tie in all these elements," he said. 

While UrbanCode's uDeploy gets 90% of its customers from the operations side, 
the company also attracts developers familiar with AnthillPro. UrbanCode's technical 
evangelist Eric Minick explained: "The production deployment is considerably more 
complex and fundamentally different than what development does. You don't get to 
drop all the data and start from a clean database, because data is our business. 
Where a lot of teams slip up with a continuous-delivery effort that originated with 
development is, they build it all on dev-style deployment, and the gap is just too far." 
A better approach is to start with the complex and work back toward the simple: start 
production-style, then automate QA, then incorporate development. 

According to Nolio CEO Doron Gerstel, Electric Cloud and UrbanCode both "come 
from build solution and want to expand it. They have a large installed base in build 
integration that they want to upsell to continuous or release automation. Nolio was 
designed foremost as a deployment-automation tool for large enterprise." 

Once an application is live, however, the story doesn't end. "Just because your 
application is up doesn't mean it actually works," said Matt Watson, CEO and founder 
of Stackify, a year-old startup aiming to put application monitoring in the hands of 
developers, not operations. 

"The biggest problem we saw is developers don't have access to the servers. Most 
of time, they get no access or admin access. Lack of access makes it very difficult to 
troubleshoot problems." 

A SaaS-based tool that runs on Windows Azure, Stackify troubleshoots remotely 
where other tools are too painful to use. "I think there are too many tools, and that's 
part of the problem," said Watson. As for the cloud? He is blunt: "DevOps to me is the 
concept of developers and operations working together. And that has nothing to do 
with the cloud." 


—Alexandra Weber Morales 
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Improved analytics for cloud-based applications using graph technology 

Many companies are considering cloud based solutions for ease of deployment and reduced implementation 
costs. When embarking on the development of a new product or service for the enterprise in the cloud, there 
are a few key things to keep under consideration. 

Velocity - Many solutions imply real-time access to information, when in fact, the access is dictated by many 
outside factors, can be limited and require hours for query performance across distributed environments 
depending on the depth of analysis required. If you are looking for basic analytic queries, most databases will 
be sufficient. If your business is time sensitive, finding a database that optimizes the navigation and query of 
data in a distributed environment is crucial to achieve fast search results. 

Variety - Today your data comes in many formats: video, text, image, voice mail, e-mail... In order to properly 
store Big Data and be able to have a deep understanding of the relationships and connection information within 
your data set, you will need a flexible database that is able to store all data and connection information as first 
class citizens to allow for ease of search. 

Volume - Understanding how much data you plan to be working with will help you to understand the tools 
required to optimize your solution in the cloud. Whether you require a mix of technologies or a single technology 
solution, ensuring that the solution you select has a path for growth from the start will help to alleviate unforeseen 
concerns in the future. 

InfiniteGraph, the distributed graph database, enables organizations to achieve greater return on their data related 
investment by helping them “connect the dots in time” on a Global scale and to ask deeper and specifically more 
complex questions. InfiniteGraph enables your analytics solutions across new and existing data stores. 
InfiniteGraph powers solutions for organizations in many verticals including social networking, healthcare, 
finance and security. 

By using a graph database to store data along with its relationship and connection details, you gain increased 
insight and a global perspective of all your data with real-time access. Some of our clients are analyzing the 
li nks between so much data it is the equivalent of the Library of Congress in less than a day. And that kind of 
real time analysis allows for deeper, new and more insightful decisions support within your data. 
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people. What I propose is, you’re not 
going to hire those people. You’re going 
to need to form a crack team of them 
internally, and then help the rest of your 
organization get on board.” 

Respect for resource patterns 

Part of getting on board should be sam¬ 
pling the air at a DevOps conference 
like Velocity, or perusing Burgess’ writ¬ 
ings, where you’ll find fascinating ram¬ 
bles about Chomsky’s hierarchy and 
language theory, and Alvin Toffler’s 
adhocracy. In the aforementioned 
USENIX article series, Burgess 
lamented that we still think of IT man¬ 
agement as the creation of “golden 
master servers that are to be wor¬ 
shipped by hundreds, perhaps thou¬ 
sands of clones. Adhocracy is not the 
default doctrine in computer adminis¬ 
tration.” 

Allspaw waxed poetic about capacity 
planning, turning it into almost a Zen 
discipline: “Capacity planning is a term 
that to me means paying attention. Web 
applications can fail in all sorts of dra¬ 
matic ways, and you’re not going to 
foresee all of them. What you can do, 
however, is make use of what you do 
know about what happens in your real 
world on a regular basis. Things like, 
'My database can do X queries per sec¬ 
ond before it keels over.’ Or 'My cache 
can only keep Y minutes worth of 
changing objects,’” he said in an inter¬ 
view on the blog High Scalability. 

Observing behavior meticulously 
leads to educated forecasts, according 
to Allspaw. System-level statistics for 
CPU, memory, network, storage and 
application-level metrics for users, 
posts, photos, videos, page views, sales 
and the like are the clues that feed 
operations’ omniscience. 

According to Amazon CTO Werner 
Vogels in a 2006 ACM Queue article, 
“Giving developers operational respon¬ 
sibilities has greatly enhanced the qual¬ 
ity of the services, both from a cus¬ 
tomer and a technology point of view. 
The traditional model is that you take 
your software to the wall that separates 
development and operations, and throw 
it over and then forget about it. Not at 


Amazon. You build it, you run it. This 
brings developers into contact with the 
day-to-day operation of their software. 
It also brings them into day-to-day con¬ 
tact with the customer. This customer 
feedback loop is essential for improving 
the quality of the service.” 

And service is definitely the opera¬ 
tive word: Visiting the Amazon.com 
gateway triggers calls to more than 100 
services to collect data and dynamically 
construct the page. In a horizontally 
scaled, unreliable new world, there’s 
truth to this idea that the customer is no 
longer just the business stakeholder or 
the user story; it is in fact that cloudy 
beast comprising billions of connec¬ 
tions and requests. 


In a horizontally 
scaled world, 
the customer 
comprises billions 
of connections 
and requests. 


Some have wondered if the concur¬ 
rency concerns of massively scaled 
applications, similar to those observed 
by C++ expert Herb Sutter eight years 
ago, could portend a resurgence in 
Erlang, the language developed by 
Ericsson for telecom applications. 

“If you look at the back end of 
Chef—the activity of starting a connec¬ 
tion, transferring a payload, receiving 
acknowledgement and shutting down 
the connection—it looks a lot like 
telephony,” said Opscode’s Brown. “It’s 
built with Erlang, which is a beautifully 
fault-tolerant concurrency architecture.” 

Aiming for continuous maturity 

Regardless of who’s driving the busi¬ 
ness, IT or development, DevOps 
makes sense as the ultimate extension 
of agile. But if continuous delivery is 
the aspiration for enterprises inspired 
by the Amazons, Facebooks, Flickrs 
and Etsies out there, it’s still a ways off. 


Helpfully, vendors have defined matu¬ 
rity models to motivate those contem¬ 
plating push-button deployments. 

“We developed a deployment-matu¬ 
rity model and identified four steps: 
Manual, script, automation, and contin¬ 
uous application delivery,” said Doron 
Gerstel, CEO of Noliosoft, which 
makes application release-automation 
software. “Most of the solutions that we 
know of can get you up to level-three 
automation, which is basically to auto¬ 
mate the way you are doing things now 
on a single environment. Level four— 
continuous application delivery—is like 
a conveyor belt that connects all the 
stages in the release pipeline, modeling 
the application in such a way that it can 
be applied to any environment. It needs 
to be all the time in motion, like the car 
industry.” 

Humble’s company, ThoughtWorks, 
offered its own model: focus on prac¬ 
tices, not tools. In a Forrester white 
paper commissioned by the company, 
the company laid out five stages that 
dovetail with the Carnegie Mellon Uni¬ 
versity Capability Maturity Model. 
Level-two automation involves an 
adaptive delivery process with relative¬ 
ly short iterations, some automated 
testing and scripted builds, and time- 
boxed releases. 

At level three, teams follow one of 
Humble’s key practices: “trunk-based 
development with continuous integra¬ 
tion of all changes.” At level four (quan¬ 
titative management), a deployment 
pipeline is in place, rejecting bad 
changes, and “delivery teams prioritize 
keeping code trunk deployable over 
doing new work.” By stage five (opti¬ 
mization), teams fine-tune cycle time in 
order to learn from customers, and 
“continuous deployment capability 
enables business innovation/experi¬ 
mentation.” 

And there it is, full circle: the busi¬ 
ness learning from operations. Will it 
pan out for non-Web-facing enterpris¬ 
es? Do the lessons of Amazon and Oba¬ 
ma for America apply to every enter¬ 
prise? These are still early days, but the 
energy is right. Watch those ops guys: 
They’re moving fast. I 

□ Find this story at http://sdt.bz/41543 
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In the .NET world, patterns, practices and tools 
help developers sew up software that will be 
understood by colleagues and an easy fit for users 


BY DAVID RUBINSTEIN 


S oftware developers are paid to 
create functionality and solve 
problems. With time-to-market 
demands putting more of a squeeze on 
them to produce working code, the 
quality of the code they write could 
become a lower priority as they race to 
get deliverables out the door, and then 
later try to fix any problems that might 
be encountered by users. 

Add to this the unique challenges 
presented by developing software for 
Microsoft’s .NET platform, and quality 
could become compromised even fur¬ 
ther. 

“What makes .NET unique among 


Windows platforms is that it’s garbage 
collected and that it runs both on the 
client and on the server,” explained 
Chris Sells, vice president of the devel¬ 
oper tool division at Telerik. “What this 
means is that apps need to be tuned 
differently for load times and respon¬ 
siveness on the client versus overall 
throughput on the server. Further, 
apps need to be profiled for memory 
leaks so that they’re not swamping a 
user’s computer or taking down a serv¬ 
er. These things are especially difficult 
for .NET programmers, because the 
garbage collector makes it very easy to 
make code that works and very difficult 


to write code that performs well and 
uses memory efficiently, because the 
garbage collector hides flaws from 
you.” 

Many development organizations 
have adopted some form of agile and 
continuous build and delivery to ship 
products more quickly, yet some argue 
this forces organizations to put less of 
an emphasis on quality. Or, to maintain 
the desired level of quality, they are los¬ 
ing some of the advantages of agile 
development. 

Karthik Ravindran, senior director 
of ALM at Microsoft, said that organi¬ 
zations need to strike a balance 


Quality is different for different consumers 

When code is written, it has two intended audiences. First, there 
is code that's built into an application and delivered to end 
users. Second, there's code as a means of communicating 
knowledge between developers. 

And quality—or lack of it—in code can have very different 
sets of consequences for these two groups. 

“For end-user development, quality is relative to expecta¬ 
tions," said Sergei Sokolov, vice president of product manage¬ 
ment, test and performance at SmartBear Software (which sells 
software quality tools). “For a disposable app such as a game, 
there's one level of quality. For enterprise applications, there's 


another level, and for medical-type applications, a third tier. 
With enterprise apps, you need scalability, usability, a fair bit of 
security, and of course that the thing actually works as intend¬ 
ed." So, the desired end-user quality will determine what prac¬ 
tices a developer needs to employ to reach that level. 

Coding for developers, which Sokolov said is a component 
that's often overlooked during development, requires such 
things as structure, clarity and using patterns for effective com¬ 
munication between developers. “Coding is basically technical 
writing. It's prose of a sort," he said. “You need to not only cap¬ 
ture knowledge, but also enable others to understand the code 
for maintenance and modification." I 

—David Rubinstein 






between agility, quality and scale. 
“There’s a lot of talk about agile and 
agility, but without quality, it doesn’t 
add business value,” he said. “You have 
to be fast with quality built in. Quality 
without agility doesn’t add value either. 

“Today, in an effort to capitalize on 
the modern business opportunities 
enabled by software, decision-makers 
and practitioners are striving hard to 
strike the tough balance—and this is 
where the challenge exists—between 
agility and quality without compromis¬ 
ing either.” 

There are two ways to look at the 
issue of code quality: development best 
practices, and the use of tools to ensure 
quality. But how does an organization 
define quality? 

Nail down your measurements 

“Code quality is a squishy thing,” said 
Chris Sells, vice president of the devel¬ 
oper tools division at Telerik. “There 
are all kinds of ways to measure it, from 
things like complexity and how many 
functions you’ve got, and how many 
lines of code you’ve got in a particular 
function, or how well you’ve named the 


The Telerik Solution 

JustCode: This Visual Studio extension for code¬ 
quality analysis and refactoring supports a greater 
range of refactorings as well as a number of open- 
source unit test frameworks for low-level unit testing. 

A built-in rule engine reads your code as you write it 
and gives comments on things that aren’t done 
according to that set of best practices. “In .NET, it’s 
easy to make code work, but you’re not sure you’ve 
done it the right way,” said Sells. With JustCode, 
developers “get an education as they write, and it 
makes you a better coder as you code,” he said. 

JustTrace: A standalone tool that profiles an 
application to detect such things as memory leaks or performance issues before 
they become big problems. The tool takes a snapshot of the problem area and 
isolates it for faster remediation. 

JustMock: This low-level developer tool gives users the ability to create a 
fake environment in which to write code so it doesn’t run against the production 
environment. 


SELLS RECOMMENDS 

"Entire books have been writ¬ 
ten about [quality]. I recom¬ 
mend '.NET Coding Style Guide¬ 
lines.' Take a look at that book, 
use the tools and use that pro¬ 
filer. Check for memory leaks, 
check for performance prob¬ 
lems. Those are my top three." 
He added that .NET program¬ 
mers "need to be proactive 
about performance and memo¬ 
ry usage tuning for .NET apps." 


variables or the function names or the 
comments, to how well-formed, how 
secure it is, how robust it is. Code qual¬ 
ity is such a huge topic.” 

A good practice for developers is 
refactoring. “The idea is you look at a 
mess of code that works sort of right, 
but you want to refactor it to be more 


efficient, more readable, more main¬ 
tainable,” Sells said. 

Use small methods 

Mark Miller, chief architect of IDE 
tools at DevExpress, said one of the 
best things developers can do to create 

continued on page 40 ► 
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MILLER RECOMMENDS 

"Refactor like crazy. When you 
see a problem, you fix it." 


I-1 

The DevExpress Solution 

CodeRush: This Visual Studio add-in enables “coding at the speed of thought,” 
said Miller. The software highlights code structure for deeper understanding, 
and visualizes the things that are happening with complex code so debugging is 
made easier. Further, developers can use 
CodeRush to prototype software, and take advan¬ 
tage of code providers that he described as “kind of 
like autocomplete or Microsoft’s code snippets on 
steroids.” Code templates offered in CodeRush help team members adhere to 
an organizations coding standards, and thus “the quality of everyone’s code is 
bumped up a little bit,” he said. 

CodeRush also enables better refactoring by detecting duplicate code and 
offering solutions to consolidate that code so it can more readily be understood 
and maintained. The tool extracts the interface so that all refactoring takes 
place in the code, letting developers “think about design rather than operating 
the tool,” Miller said. 

Finally, CodeRush provides code analysis that can locate and turn a spotlight 
on issues with the code “on the fly,” and makes remediation one-click simple. 


◄ continued from page 39 

quality code is to use small methods. 
“There are a number of benefits here 
for higher code quality,” he said. “New 
developers can get up to speed faster, it 
takes less time for humans to under¬ 
stand it, and a small method serves a 
single purpose.” 

Source code, Miller said, is a compa¬ 
ny asset, and it makes sense for the 
company to invest in the quality of that 
asset. He is a believer in test-driven 
development. “Test cases allow you to 
set expectations as to how the code is to 
perform. The problem is, they’re time- 
consuming to create. For every method 
you write, you’ll have multiple test cas¬ 
es. That’s another reason to write small 
methods,” he said. 

One of the tenets of test-driven 
development is “consume first,” where 
you spell out what you want the appli¬ 
cation’s consumers to do before you 
create the code. “If the application is 
hard to use, you’re not thinking of the 
consumer first,” Miller said. 

He elaborated: “As an example, I 
might have an engine, then inside the 
engine it might have a method called 
print, and I might pass it a document... 
That’s an example of a simple method 
that would be consumed by developers. 
Well, it turns out that it’s easier to write 
code that is easier to consume by devel¬ 
opers if you write it in what’s called a 
consume-first manner, where you write 
the call-in code first. You say, 'Here’s 


what I want my consumers to do.’ And 
here’s why that’s important: If you don’t 
do that, if you don’t think about the 
consumer developer working with the 
library, then you’ll typically create a 
method, and there are no constraints on 
ease of use for that method. 

“If you need to add parameters, 
you’ll have as many parameters as that 
requires. If it’s hard to use, you have no 
idea because you’re not thinking about 
it from a consume-first point of view. So 
consume-first code creation is also 
something that’s very useful when 
you’re creating libraries, or you’re work¬ 
ing in a large team and you’re creating 
code that will be consumed by other 


developers. If you don’t think about it 
carefully from the consumption stand¬ 
point, you’re likely to create code that’s 
harder to use, harder to consume.” 

Other practices for code quality 
Miller espoused include pair-program¬ 
ming, making sure variable names are 
meaningful and consistent, and to con¬ 
solidate duplicate code. 

Code review a 'cornerstone' of quality 

Sergei Sokolov, vice president of prod¬ 
uct management, testing and perform¬ 
ance at SmartRear Software, said he 
believes quality begins with coding 
practices and code review, which he 
called “a cornerstone of quality.” 

He said code review and static analy¬ 
sis are the best tools that serve the two- 
sided quality issue of satisfying end 
users and fellow developers. “There are 
of course different parameters that you 
can apply to set up a process with them, 
because with both, you can quickly get 
to a state where the effort to sustain 
these practices outweighs the benefits,” 
he said. 

“One can argue that finding one crit¬ 
ical bug is worth a great many hours of 
effort spent on sustaining the process. 
But if you set it up productively, in that 
you don’t check for too many things, 
then you will observe a positive impact 
to both code maintainability and the 
overall code quality for the end user. 

continued on page 42 ► 


Ask not what your testers can do for you 

How developers create and organize those tests, and what developers can do to help 
testers automate test cases, are important steps in a life-cycle approach to quality 
assurance, according to Hans Buwalda, CTO of testing software company LogiGear. 

Testing can be organized in an agile sprint, in which developers can do unit tests, 
automate them with actions, and get all the testing and automation as part of the 
"done" status at the end of a sprint, he explained. He also recommended dividing 
between unit, functional and business-level tests. 

Finally, Buwalda offered tips for stable automation: 

Use hidden properties. Developers should give elements a hidden internal name in 
the Ul, which helps in test reuse. Also, this relieves the tester of having to map the Ul, 
and helps in internationalization. 

Create active criteria. It's important to set timing, to signal to the tester when the 
file is downloaded or a tree is ready. This lets developers and testers collaborate and 
overlap, and it "saves tons of time," Buwalda said. 

Use the sleep function. This frees up the processor so the automated unit test has 
time to run, Buwalda explained. I 

—David Rubinstein 
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◄ continued from page 40 

“With .NET or anything else, based 
on what Eve read over the years and 
what I see in our development teams, 
really good practices haven’t changed,” 
Sokolov continued. “The technology 
has changed, the level at which the 
application is described sometimes 
changes, some of the implementations 
change, but the basic practices as they 
have been established probably around 
almost 20 years ago are still there.” 

For .NET development, he said C# is 
a simpler language than C and C++, and 
has evolved to address some of the typi¬ 
cal problems of those languages relative 
to memory and other issues. “Threading 
is a problem. Memory management, 
even though the simplistic forms of that 
have been addressed with the runtime, 
is still a problem, because you can paint 
yourself into a corner if you’re not 
watching what you’re doing,” he said. 

“Security is always a problem, 
because it goes beyond a language; it’s a 
paradigm, and therefore there may be 
practices that may be language-specific, 
but there may be far more practices 
that are implication-specific. So then 
you kind of go beyond the .NET para¬ 
digm and you talk about the general 
principles of addressing databases and 
building queries and validating inputs, 
etc., which are universal.” I 

□ Find this story at http://sdt.bz/41546 


SOKOLOV RECOMMENDS 

"I'm a big fan of code review and 
a big fan of static analysis." 


I-1 

The SmartBear Solution 

CodeCollaborator: A peer-review tool that integrates with Visual Studio 2012 
and supports Microsoft’s Team Foundation Server source control, creating a 
workflow that provides more traceability to the code-review process. 

AQtime Profiler: A performance runtime, 
memory and exception profiler, and code-coverage 
tool that is a straight plug-in to and a superset of 
these capabilities in Visual Studio. 

SoapUI: This standalone tool offers automated testing of Web services that 
Sokolov said is “perhaps the most widely used test tool on the planet,” though 
he acknowledged it does not support Windows Communication Foundation at 
this point. 

TestComplete: SmartB ear’s functional test-automation tool has supported 
Windows technologies throughout its life, supporting Visual Studio from 2002 
through 2012, plus Silverlight and .NET. It’s a very capable record/replay/script 
data-driven test framework that works with all Microsoft technologies, Sokolov 
said. Tests created in this tool can be checked into TFS and then made visual 
in Visual Studio, he explained. 


Into the cloud 

The most pernicious aspect of development that works against code quality is complexity. 
So, if you can insulate the developer from complexity, you'll end up with better code all 
around. This, according to Justin Weiler, CTO of Platform-as-a-Service provider FatCloud. 

FatCloud's platform has a NoSQL database built in, along with an asynchronous 
work queue and a file-management system. The result, Weiler said, is that "develop¬ 
ers can concentrate on writing business logic, and the tough stuff of communication, 
routing and scaling happens as part of the platform. And, if you're deploying data 
alongside the business logic, you minimize the network costs and boost throughput 
at the same time. For a high-performance enterprise application, that's a huge win." 

Weiler sees a future in which the industry moves toward greater application porta¬ 
bility between environments and toward maximizing app performance. "And, if you 
can make it as easy as possible for developers, that's the end goal." I 

—David Rubinstein 


Quality as a full 


life-cycle 

BY DAVID RUBINSTEIN 

For code quality, best practices and 
tooling come together around testing. 
There are many approaches to develop¬ 
ment and testing, but for modern appli¬ 
cations and software life cycles, it’s 
important to have a cadence where 
development and testing work hand in 
hand, said Karthik Randivan, senior 
director of ALM at Microsoft. 

Quality, he said, “is a full life-cycle 
practice. Every role has a role to play in 
quality. The QA department can be an 


practice 

enabler of agile, but there need to be 
quality champions.” He advised that 
organizations take advantage of the col¬ 
lective muscle of the team to move 
from quality champions to quality 
brains and ultimately to quality thought 
leaders, those who also enable agility. 

“We’re strongly of the opinion that 
quality has always been a top priority of 
organizations whose businesses depend 
on software (enterprises, ISVs, service 
providers),” said Randivan. “The trend 
continued on page 44 ► 
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The Microsoft Solution 

Visual Studio Test Professional: For project managers, testers and business 
analysts, the software offers a visual way to capture requirements. Also, feed¬ 
back from acceptance tests gets linked into work items and tasks in Microsoft’s 
Team Foundation Server automatically For test planning and management, 
manual and exploratory testing are available. It also 
handles test-case management. 

Visual Studio IDE (Premium): Handles code¬ 
quality analysis and unit testing, including Fakes 
and Emulators for “mocking” code that can be test¬ 
ed without impacting the production environment. 

Visual Studio IDE (Ultimate): Adds UI 
automation testing, performance and load testing. 

Editors Note: Microsoft offers many different 
SKUs for Visual Studio, so the above products are a very broad overview of 
capabilities. For more specific information, see Microsoft’s Visual Studio page. 


RANDIVAN RECOMMENDS 

"Quality begins with good 
requirements. Try to merge 
functions to eliminate the steps 
of taking requirements through 
the pipe. Have developers in the 
customer conversation, even as 
a fly on the wall in the meeting." 

i 


◄ continued from page 42 

we’ve recognized in such organizations 
is compromising agility for quality. 
Today, in an effort to capitalize on the 
modern business opportunities enabled 
by software, decision-makers and prac¬ 
titioners are striving hard to strike the 
tough balance—and this is where the 
challenge exists—between agility and 
quality without compromising either.” 

Randivan said Microsoft is seeing 
businesses and enterprises starting to 
modernize their software investments 
and move toward modern business appli¬ 
cations. But in this new world, the objec¬ 
tive is not always known when people 
start working on these applications. In 
modern development, he said, “usually 
there tends to be a build-measure-leam 
hypothesis where people want to be able 
to go and do something, kick the tires, 
test the waters, see how it works, and 
then decide whether to do more or to do 
less of a particular investment. 

“That’s a pretty different mindset 
compared to how people tend to 
approach the classic IT line-of-business 
type systems, with formal processes of 
baselining and pre-baselining and really 
knowing what does ‘done’ mean even 
before starting the investment.” 


Traditional QA does not scale, so it 
cannot meet the demands of a modem 
application life cycle based on agile prac¬ 
tices and continuous delivery. If any¬ 
thing, it bogs down cycle time by not ful¬ 
ly engaging all stakeholders throughout 
development, which can result in notic¬ 
ing too late in the development phase 
that requirements were not met. 

Part of that problem is that while 
organizations are transitioning their 
development and project-management 
teams to agile practices, they’re not 


doing that as much with testing and IT. 
“They try to do this and still treat quality 
as an afterthought, that quality is some¬ 
thing which is predominantly the QA 
function’s accountability,” Randivan said. 

“The QA function kicks into gear after 
the code is written versus before or after 
code is being written. The QA function is 
very specifically focused on the tester, 
and what the tester does to validate the 
software, versus the overall quality also 
includes other aspects like user accept¬ 
ance testing, system integration testing, 
stress testing, operations readiness test¬ 
ing. Why we see some organizations fall 
is where they go agile upstream in things 
like planning and management, but then 
they sort of switch off to a waterfall mode 
when they go downstream into testing. 
That in turn has a negative side effect on 
agility as well because what it leads to is 
late detection of unknowns, late detec¬ 
tion of unmet user requirements, late 
detection of operations readiness, gaps, 
all of which go back to the phase of plan¬ 
ning and development.” 

In testing, techniques such as con¬ 
tinuous acceptance testing; continuous 
validation from other stakeholders; test 
automation during continuous integra¬ 
tion; and exploratory testing can elimi¬ 
nate the post-development logjam and 
create a culture of building quality into 
the application throughout its life cycle, 
Randivan said. 

“To be truly agile,” he said, “you want 
to think about quality end to end.” I 

□ Find this story at http://sdt.bz/41545 


Quality enablement 

FOR THE LIFE CYCLE 

1. Instate quality at every phase of the app life cycle, with the team as a whole 
bearing responsibility for delivering quality software. 

2. Avoid a "later than possible" detection of unmet requirements. 

3. Shorten cycle times in delivering value with agility and quality. 

4. Lower rework costs. 

FOR THE DEVELOPMENT PHASE 

1. Acceptance test planning: practices that define actionable requirements that can be 
used to generate testable acceptance criteria. The notion here is that all stakehold¬ 
er requirements (functional and non-functional) be expressed as testable accept¬ 
ance criteria, which when fulfilled will result in software that meets its objectives. 

2. Continuous acceptance testing: practices that continuously test software against 
the defined acceptance criteria as it is being developed, using the appropriate 
tools, and by the appropriate stakeholder functions (product owners, developers, 
testers and users). Continuous acceptance testing helps prevent late detection of 
unmet requirements, and it reduces rework costs. 

FOR THE OPERATIONS PHASE 

1. Testing in production: reusing shared test artifacts from the development phases 
to continuously monitor the health of software in production and to detect anom¬ 
alies prior to users encountering them 

2, Integrated incident management: practices that resolve production incidents with 
an emphasis on lowering MTTR (mean time to repair) 

Source: Microsoft 
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Your tests need 
to go faster 



Fortunately, tools, techniques 
and determination are all you need 
to speed things up 


BY MARNIE HUTCHESON 


U sing agile development methods, continuous build and deployment, organ¬ 
izations can produce several builds in a day. But if it takes 30 hours to test 
a build, how do testers get it done by tomorrow? How do they keep up? 


By leveraging the automation capabilities of the 
very tools that are threatening to bury testers, to be 
able to do more testing and increase test efficiency. 

A couple of years ago, I was testing the cus¬ 
tomer-facing and internal-facing portals for a com¬ 
pany that provided VoIP services. It took about 30 
minutes for me to manually deploy a Git Tag to my 

Mamie Hutcheson is a technical tester 
with over 15 years of experience 
designing and automating software test 
systems running on the Internet. Her 
specialty is systems integration testing 
and release management in large real¬ 
time systems. She holds an Engineering 
degree from the University of Colorado in Denver. 


virtual Unix/Tomcat test environment. After that, 
it took about 60 hours of testing to go through the 
major scenarios and validate the results. 

Eventually I cut it down to 30 hours of testing 
by adding some automated scripts to prepare the 
database with the test accounts and profiles that 
my test scripts needed. This saved me hours of 
manual data entry in the portal interface. I also 
added some automated scripts to help quick-test 
the basic portal features, but the real testing had 
to be done manually. 

Sales and Marketing were evolving the “per¬ 
fect” feature package plans. As a result, the cus- 

continued on page 48 ► 
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◄ continued from page 47 

tomer’s billing statement changed with 
every new build. The requirements 
were fuzzy and constantly changing as 
they tried out different ideas. 

Also, as we neared the release date, 
I discovered that certain rapidly prolif¬ 
erating inventory items in the produc¬ 
tion database could not be deleted 
when they ceased to exist in the real 
world. So, we started testing database 
fixes that could not be completely veri¬ 
fied in testing due to the differences 
between the QA and production envi¬ 
ronments, meaning it would have to be 
tested again in production. 

In this same timeframe, unsched¬ 
uled and untested changes were made 
to some IP tables during the weekend. 
The resulting errors caused major out¬ 
ages in the customers phone services. 
The director called a big meeting and 
told everyone to slow down and be 
more careful. He said, “If someone asks 
you to do something you are not com¬ 
fortable with, raise your hand and say, T 
am not comfortable doing this.’” 

After several extensions to the 
release date (due to continuous 
changes in the application), Develop¬ 
ment decided to schedule the release to 
production. They told me I would be 
getting the release-candidate tag for 
testing the next morning (Friday), and 
they were going to deploy the release 
on Saturday. So, I could verify the 
release in production on Sunday, giving 
me a sleepless 24 hours to do my 30 


hours of testing in QA, and another 24 
hours to repeat the feat in production. 

Given the risk to production, I wrote 
an e-mail saying the magic words: “I 
don’t feel comfortable doing this...” My 
contract was cancelled an hour after I 
sent the e-mail, and they released the 
portals on Sunday as planned (without 
my testing). 

Lesson learned: Test faster 

Everyone needs to get code into produc¬ 
tion faster. So, even if management 
seems sympathetic to the problem, the 
fact remains that we have to deploy and 
test faster, or get dropped by the wayside. 

I haven’t really found a way to test 
faster. What I have found are some 
ways to get the code moved through the 
test stages faster, without taking on a 
risk that I am “not comfortable” with. 

I have been working with some 
excellent continuous-delivery (CD) 
automation tools as well as DevOps 
methods over the past year. I have dis¬ 
covered that the same tools that have 
made it possible to build and deploy an 
application in minutes (and bury the 
testers) can automate testing just as 
effectively as they do deployment. The 
first, best trick I learned is to leverage 
their automation to automate my test¬ 
ing. Based on this experience, I can say 
that there are several good test-automa¬ 
ton opportunities in CD and DevOps. 

Here are three opportunities I have 
discovered to speed up testing using 
automated deployment tools in an 


agile/DevOps environment: 

1. Institute collaboration, and 

allow self-serve deployments 
for developers and testers. 

2. Add test automation to the 
deployment process to: 

• Automate infrastructure and structur¬ 
al tests. This is mechanical, repeat- 
able, simple and boring, and should 
always be automated. There are a 
number of good tools out there that 
do a good job in this slot. 

• Automate test data preparation and 
distribution to your test environments. 

3. Do less testing. Function, story, 
scenario, user acceptance and 
exploratory testing are all types of 
testing that everyone agrees should 
be done manually. Don’t try to auto¬ 
mate these tests, just what has 
changed. (Scary, I know, but with 
CD you can actually do this without 
adding much risk or discomfort.) 

Collaboration and self-serve deployments 

Many testers in entrepreneur-driven 
shops do their own deployments before 
they test. This saves the time you used 
to spend waiting for someone else to 
deploy your application. Testers in this 
role actually have more to test than ever 
before: not just the application func¬ 
tions, stories, integrations, configura¬ 
tion and dependencies, but also the 
deployment process itself. 

Testing the deployment process is a 
new opportunity in CD and DevOps. 

continued on page 50 ► 


The problem(s) with function and scenario test automation 


Even for companies that get viable automated test suites up and 
running, they quickly stop finding bugs and are good only for 
catching the occasional oddity. There is a tendency for people, 
especially management, to believe this means they have found 
all the bugs, so they have tested enough. 

Further, and more importantly, running tests that aren't find¬ 
ing bugs requires effort. You have to run them, check the 
results, and—here's the big one—maintain the tests, but the 
payback is missing. All too soon, the automated tests are aban¬ 
doned as a waste of time when they stop finding bugs or, more 
commonly, when they require maintenance. Either way, man¬ 
agement is not quick to get these tests running again after they 
stop. And so we coast along until there is a major failure and 
interest is reawakened. 


Why organizations stop running automated tests 

I checked back with the four companies I worked with most 
recently, and every one of them had stopped running their auto¬ 
mated function test scripts. Three of the four had also stopped 
using their automated unit tests in their Cl builds over the past 
two years. 

The common complaint was that the automation tester(s) 
left the company, and then the scripts stopped working because 
there was no one who could maintain them. 

Two of the companies were able to replace the automation 
test programmer, but in both cases the replacement(s) failed to 
restart automation testing. There are lots of reasons given, but 
the brittle nature of the automated tests, the special knowledge 
required, and the fragility of free test tools like Selenium and 
WebDriver were the main ones. 

—Marnie Hutcheson 
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Cl, CD and DevOps, 

from a tester’s 
perspective 



BY MARNIE HUTCHESON 

Continuous Integration: Automated 
build and unit test. From agile devel¬ 
opment came the need to integrate new 
code as soon as possible after it is 
checked in, while ensuring good code 
quality in the process. The first Continu¬ 
ous Integration servers to automate this 
process appeared in the late 1990s, and 
in only a few years, they gained wide 
acceptance. (The free ones like Hudson 
and Jenkins are everywhere.) 

Today, Cl build and unit-test automa¬ 
tion is so successful that it is practiced 
across virtually all development method¬ 
ologies. Originally used to build and unit- 
test code daily, it is now typical to build 
and unit-test every time code is checked 
in. The developer who checked in the 
code that failed is notified as part of the 
process. Some commercial Cl servers 
produce hundreds and even thousands of 
quality builds each day. Not surprising 
that builds started piling up. 

Continuous Delivery: Automated 
delivery pipeline from development 
to production. CD isn’t tied to any par¬ 
ticular development methodology; it 
grew out of the IT bottleneck that devel¬ 
oped when Cl began producing more 
builds faster than IT could possibly 
deploy. If new qualified builds are arriv¬ 
ing daily, but it takes IT days or weeks to 
provision a new environment and deploy 
the code, no one is going to be happy. 

CD is about automating and stan¬ 
dardizing the software delivery pipeline. 
It is focused on getting software from 
development through the life-cycle 
stages and on to production as quickly 
and reliably as possible. If the manual 
process takes days, the automated 
process will probably only take minutes. 
The automated process is repeatable, 
reliable and reduces deployment errors. 

Some of this faster processing is 


accomplished by improving and codify¬ 
ing the change-management, provision¬ 
ing (virtual and cloud are the hot items 
here), configuration and test processes, 
but the real exciting work is in using 
deployment-automation tools. 

Most application deployments were 
(and still are) mostly manual, with scripts 
providing some automation. There are a 
lot of moving parts that have to be 
planned, managed and scheduled, espe¬ 
cially when it comes to production 
releases. Deployments involve environ¬ 
ment provisioning and configuration, 
collaboration between groups, approvals, 
and lots of eyes on the ball. 

Manual deployments are slow and 
error-prone, and rollback is not always an 
option due to the interdependence and 
complexity of software systems. Auto¬ 
mated deployments can shrink days of 
manual deployment to minutes. A good 
commercial automated-deployment tool 
will let you define the deployment of all 
the tiers in your application in one coor¬ 
dinated workflow process. They can 
accommodate different configurations of 
multiple environments along the delivery 
pipeline. And they version and store 
everything: the build packages (applica¬ 
tion components), the workflow process¬ 
es, and environment configurations. 
They report on every step. Gating 
(SDLC entrance criteria) and approvals 
can be built right into the process logic. 
And yes, they can run automated tests as 


part of the process. 

No matter how fast or slow IT cre¬ 
ates and deploys to the environments in 
It isn’t just traditional Operations and 
IT that can’t keep up, it’s system/inte¬ 
gration testing, function testing, and 
user acceptance testing. 

CD and its new tricks have helped IT 
get the code through the pipeline faster, 
and now the bottleneck has moved to the 
test effort. In a lot of shops, it is the 
testers who are scrambling to keep up 
using traditional manual processes and a 
smattering of test automation. 

DevOps is to release management 
what agile is to software develop¬ 
ment. DevOps is a new set of practices 
that have grown out of agile continuous 
integration and continuous delivery. 
DevOps focuses on breaking down tra¬ 
ditional barriers that slow the flow of 
code to production. It seeks to foster 
collaboration with all groups in the 
pipeline, especially Development and 
Operations. It uses automation and vir¬ 
tualization everywhere possible. 

DevOps automation doesn’t just 
spin up environments and move code, it 
standardizes and codifies release 
processes, versioning and storing appli¬ 
cation and environment configurations 
so that they are reliable and reusable. 
When the process becomes fast and 
reliable, then it can also be provided 
on-demand, opening the door for self- 
service deployments. I 
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Key takeaways 


We can speed up the whole deploy test process by embracing some DevOps methods 
and continuous-delivery tools: 

Don't run from the automation tools that could do the most good toward automat¬ 
ing important tests and give you the high-guality reliable information you need to test 
more efficiently. 

Don't get hung up trying to automate the wrong stuff. Automate the stuff that can 
be automated reliably and needs little or no maintenance. There are several good 
(and free or cheap) tools that do excellent testing in this role. Make them part of the 
CD deployment process the same way unit tests are part of Cl. 

Don't waste your time on a build that has a structural, configuration or integration 
issue. Drop it, which is what you would do in Cl. Don't be too guick to remove tests 
that aren't finding bugs. And plan on adding more automated tests as you find them. 

There are some really great opportunities to test faster in CD and DevOps. Testers, 
come to the party! Crash it if you have to! 

TOOLS USED IN THE MAKING OF THIS ARTICLE 

■ AnthillPro and uDeploy, by UrbanCode 

■ TestComplete, by SmartBear Software 

■ Selenium WebDriver, by SeleniumHQ 

■ The Readability Test Tool, by David Simpson 

■ Xenu's Link Sleuth, by Tilman Hausherr 



◄ continued from page 48 

Anyone doing self-serve deployments is 
testing the deployment. The most effi¬ 
cient deployment process is to have one 
core deployment process for the appli¬ 
cation and reuse it in every environ¬ 
ment in the SDLC. Each environment 
should have its own environment defi¬ 
nitions so the same core process can be 
used to deploy the application at every 
stage of the SDLC. 

I have run a lot of deployments, 
mostly manual in 2011 and automated 
in 2012. Automated deployments under 
DevOps are wonderful compared to 
traditional manual or script-driven 
deployments. 

The first difference is collaboration. 
In traditional, manual deployments, 
debugging a failed deployment requires 
system-administration knowledge, lots of 
permissions, and probably a lot of time. 
And I am not a system administrator. 

I had a manual deployment at the 
VoIP phone company take two days 
because someone changed the configu¬ 
ration of the Tomcat server. The Unix 
administrator was not available, and I 
didn’t have enough permission to even 
look at the tail of the log. These are 
classic IT deployment problems that 
DevOps is determined to fix through 
collaboration and breaking down tradi¬ 
tional silo barriers. 

CD and DevOps are both concerned 
with managing and controlling the con¬ 
figuration of the environments as well as 
the applications. So, in CD and 
DevOps, the tool could have prevented 
the failure by deploying the correct con¬ 
figuration as part of the process. 

Further, if the deployments are auto¬ 
mated using a good commercial tool, 
every step in the process will report suc¬ 
cess or failure. When I have a deploy¬ 
ment fail for reasons I don’t understand, 
I need to be able to reach out to the folks 
who can figure it out. With the tool, I 
don’t need special permissions to go 
poking around in the system; I can send 
the log to a developer or IT person for 
help, right from the tool, in minutes. 

Add test automation to the process 

Cl has proven the value of running 
automated unit tests to establish the 


quality of the build. Test automation in 
CD can verify the quality of the appli¬ 
cation, the configuration/infrastructure 
of the environment where it is 
deployed, and the deployment process 
itself. It can also be used to create and 
deploy test artifacts, like test data, that 
are necessary to test execution. 

When I polled testers who were 
doing deployments (both manual and 
automated), several reported deploying 
test data when they deploy their appli¬ 
cations, but no one reported doing any 
automated testing when they deploy. 
There have to be people taking advan¬ 
tage of this test automation opportuni¬ 
ty, but I haven’t been able to find any. 

So why aren’t testers running auto¬ 
mated tests when the application is 
deployed? There seem to be three main 
reasons. 

First, automated function and sce¬ 
nario testing is a failure, but it’s the first 
“automated testing” that people think 
of, so they focus on it and ignore other 
opportunities. 

Second, once you do get some test 
automation, running it quickly stops 
finding bugs and people lose interest. 

And third, we have been ignoring 
the really good automated tests because 
they aren’t function tests, and they 
don’t find many bugs most of the time. 


What kind of automated tests should 
we run at deployment time? Automate 
the stuff that can be automated reliably. 
Put it into the deployment process the 
same way unit tests are part of CL Cl has 
made automated unit test suites viable in 
the build cycle because the cost of run¬ 
ning these simple tests is negligible, and 
it’s the measurement of code quality. Just 
because they pass doesn’t mean that the 
code is perfect. It means that the base¬ 
line testing has been accomplished. 

There are several types of automat¬ 
ed test tools that are very reliable and 
provide valuable information with zero 
maintenance. If you add them to the 
deployment process, then they have a 
chance of becoming instantiated in the 
same way as automated unit testing is 
now a given in Continuous Integration, 
a. Use automated dynamic analysis 
tools in QA: The boss kept coming into 
the Web team’s office and asking why 
this link or that link was broken, or why 
there was a misspelled word or gram¬ 
mar error on a page. I found this seri¬ 
ously embarrassing. 

You can’t easily check 1,000 pages 
manually for a whole list of structural 
errors. But there are good tools out there 
that can test these things quickly in any 
environment, from test to production. 

continued on page 52 ► 
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The first time I ran a test tool against the 
site, it reported that about 6% of the links 
were broken. The team went into shock 
when I reported this. “The tool is bro¬ 
ken,” they said vehemently. 

I started testing the tool. It was not 
broken. Next, I ran it against our com¬ 
petitors sites. Big companies or small, 
database-driven or hand-coded and stat¬ 
ic, they averaged 7% broken links. This 
got my interest up, and I looked further. 

The automated tool detected tons of 
broken inbound links. This is bad for 
your Google Penguin quality ratings. 
There were hundreds of duplicate file 
names, which is bad for your Google 
analytics rating when the hits on your 
homepage are split over three different 
variations of the name. Then there 
were the server errors and the CMS 
errors... Got the idea? 

For Web applications, I have had 
great luck using dynamic analysis tools 
as part of the test-system deployment to 
“quick-test” the application and the 
environment. I invoke the tool at the 
end of the deployment process to pro¬ 



vide baseline tests on the deployed web¬ 
site. It produces several reports, and it 
can e-mail them to whomever you want. 

I like running it from a box that is 
outside the test and production environ¬ 
ment, because then I am also testing the 
network connectivity, DNS, login cre¬ 
dentials, server configuration, and so on. 
Running it with the right credentials 
will also test the security boundaries. 
And, it only takes about five minutes to 
test a website with a thousand pages. 

There are other automated test tools 
that can run in this space, like the read¬ 
ability tester. It has pointed out all sorts 
of content in our pages that are unintelli¬ 
gible to humans. There is also a tool that 
checks metadata on Web pages and 
videos when they are delivered, 
so it can test the database, 
the CMS, the Web appli¬ 


cation or the static content, wherever it 
is. I could spend a whole article talking 
about all the ways SEO gets messed up 
when pages don’t have the correct meta¬ 
data. If you have a thousand application 
pages, pictures and videos, do you have 
time to check that every one of them is 
properly titled, described, and tagged 
every time you deploy? 
b. Automate data preparation and 
distribution: The best ROI for test 
automation is automated data prepara¬ 
tion. This means preparing a database 
continued on page 54 ► 


STOP 

PAYING FOR 
ALM TOOLS 


ROtoMANA* 

. Tmiti 

fnfaflv 
free 


PROJECT 

MANAGEMENT 




USE CASE 


ISSUE 

MANAGEMENT 


} 7" MANAGEMENT 




Rommana is a fully integrated 
web-based ALM tool and 
methodology that you do not 
have to pay for. 

Download a FREE copy for 
your team today 

£fj/y?/yiGf)6C 

INI It RATIO APPLICATION TIEEEVCIE MANAGER 


w w w. r o m 



REQUIREMENT 

MANAGEMENT 


TEST 

MANAGEMENT 



m a?a s 












Introducing 



OS x 10.10.10 

LOLcat 

The world's most advanced desktop and laptop operating system 
gets better and better and better and better and better and better. 
And it makes the Mac, iPad, iPhone and your brain work incredibly better 
together. Android, BlackBerry and Windows Phone, not so much. 

Now available absolutely everywhere. 

April 1,2015 


What's New in OS X 10.10.10: 

Kibbles. Tiny bits of functionality that make your Mac 
the envy of all your friends. Beautiful in their stylistically 
pure implementation, it's a treat for the mind, nutrition 
for the body and 100% pure Apple awesomeness. 

Brain Lightning (beta). Go beyond the keyboard and 
connect your Mac directly to your neural network. 

Yes, the synaptic interface still has a few kinks, but most 
experts consider it to be fairly safe.That's why it's a beta. 


3D Printing Support. If you can imagine it, you can 
draw it with the newest addition to the iWork family: 
i3DdesignPro. Add an Apple i3Dbot 3D printer to build 
your creation out of colorful polymers. 

Catificial Intelligence. Like any loyal pet, OS X 10.10.10 
anticipates your desires, your dreams, your aspirations. 
Like any housecat, of course, Mac sometimes does the 
exact opposite. Welcome to real-world Al. 


I Can Has Good Mac! 



54 , QUALITY ASSURANCE I SD Times | April 2013 | www.sdtimes.com | 


◄ continued from page 52 

with all the data that the testers need to 
run their tests. Good test data design and 
automated data preparation will ensure 
that that historical data is correct and that 
no time is wasted manually re-keying 
data during the test execution stage. 

This really speeds up manual testing. 
For example, student records with 
unfinished homework or failed exams 
are necessary to trigger alerts to the 
teacher. Or a customers record show¬ 
ing that he or she has signed a contract 
triggers the next step in an order fulfill¬ 
ment scenario. 

Deployment automation can execute 
SQL scripts to prepare and deploy the 
test data when and where you need it. 
The deployment-automation tool sees 
this as just another automated deploy¬ 
ment process. The ability to automati¬ 
cally distribute test data where and 
when it is needed represents an enor¬ 
mous time-saver for the test effort. 

Only test what has changed (if possible) 

The most time-consuming testing we 
do is function, story and user accept¬ 


ance testing, because they are manual. 
What is the best way to cut down on the 
time we spend testing manually? Run 
fewer tests. Only test what has changed. 
I see this all the time. The problem is 
that we can’t normally be sure of what 
has changed in a manual environment, 
so there is a lot of (uncomfortable) risk 
involved. 

What if you knew exactly what had 
changed (since the last deployment) in 
every tier of the application you are 
testing? Could you be comfortable test¬ 
ing only the changes? There is no single 
answer to this question. But, if I had 
been sure about what had changed in 
the application at the VoIP phone com¬ 
pany, I would have been able to reduce 
my test coverage by about 80% and cut 
the 30 hours down to six. 

Here is why this can be comfort¬ 
able: The Cl server stores the build 
artifacts in an artifact repository. 
(That’s a Definitive Software Library 
under ITIL.) The deployment tool 
takes the artifacts from there and keeps 
a complete inventory of every version 
of everything: artifacts, processes, con¬ 


figuration, environments, etc. I point 
this out because this is necessary to this 
technique, but not all deployment- 
automation tools keep an inventory like 
this, so be cautious. 

I also must point out that even if the 
tool has an inventory capability, there 
may be someone in the organization 
who can’t resist the odd tweak or did¬ 
dle. There has to be a strong quality 
process in place to support (and pro¬ 
tect) the tools, the code and the 
pipeline. 

If all the changes are made using 
tools, you will always know exactly what 
code is where, how it got there, who 
ordered it, who approved it, what the 
outcome was, and so on. So, when the 
Cl server tells you what is different in 
the build of every tier in your applica¬ 
tion, and deployment automation 
deploys that version of the application, 
you can have great confidence that you 
know exactly what has changed. There 
may be dependencies and integration 
issues to consider, but for the most part 
I have had good luck with this strategy. I 
□ Find this story at http://sdt.bz/41532 
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Code Watch 


BY LARRY O'BRIEN 


Avoiding the beginner's reef 


I had an underwater slate with me, so I explained 
the situation to T. “M is very low on air, and we 
are way north.” She nodded and with quick ges¬ 
tures confirmed the plan: She would signal and 
escort the photographers back to the exit point, 
and I’d do the same with M. 

T and I have been diving together for more than 
20 years, and I knew that she could not have 
breathed more than a quarter of the air in her tank. 
But less-experienced divers expend a lot of energy 
and therefore bum through their air quickly, so 
shorter dives are part of the price you pay for more 
social diving. My conversation with T couldn’t have 
taken more than 30 seconds. I looked around for M. 
He was on the surface and swimming directly toward 
shore, where 6-foot waves were crashing over a shal¬ 
low reef ledge. Things had gotten quite serious. 

Risk, in project management, means a problem 
that hasn’t happened yet. Inexperienced project 
managers often focus too much on spectacular (but 
less likely) problems. Every person who swims in 
the ocean regularly is used to being asked about 
sharks. Yes, sharks exist. Yes, there’s some chance 
you might see one. Yes, there’s even some astronom¬ 
ically slim chance you’ll get bitten. In software, yes, 
hitherto-unknown defects in infrastructure can 
appear. Yes, vendors might not fix them. Yes, there’s 
some chance this will affect the schedule. 

But experienced project managers can do the 
opposite, as T and I had done with this dive. We’d 
focused on the mundane; the entry and exit to the 
dive was through a channel in the reef and, although 
it was generally the case that the high surf spent itself 
on the reef ledge, we’d warned our companions to 
check for the occasional large set that could shotgun 
down the channel to shore. That was the risk on the 
dive, to our minds. But while we thought we had 
accounted for the experience levels of our compan¬ 
ions, we had forgotten the mindset of a newcomer. 
The idea of exiting over a reef ledge simply doesn’t 
occur to an experienced diver, since even the slight¬ 
est of surf will push you against rocks and coral. 

What M was now about 10 feet from experienc¬ 
ing was infinitely worse: He would be lifted up and 
forward into the crest of the wave, and then would 
be borne along with all that energy onto a reef that 
was about 18 inches below the surface. Once he 
was in that situation, there would be no way to 


assist him. I bellowed at him and, thankfully, he 
stopped and turned towards me, even as I could 
see the wave he was on begin to stand up. 

Most program managers would recognize that it’s 
risky to put a junior programmer on core code, but 
many don’t recognize that there’s no such thing as 
“safe” code in today’s lean projects. Once, tedious 
human-assisted QA was the training ground for new 
programmers, and for a while it was accepted that 
all code had to be peer-reviewed before check-in. 
But today, testing is deeply integrated into the 
development life cycle, and a crisis in testing can 
break the entire development and deployment 
cycle. And while many teams will nod about com¬ 
prehensive code review, most teams end up with a 
push-based “Can you check this?” process that relies 
on developers recognizing their own limitations. 

I talked to M until he’d calmed down, and we sur- 
face-swam back to the channel, 
where T and the photographers 
exited without problem. I swam 
with M, timed the sets, and sent 
him in, hovering a few yards back. 

As T and the others assisted him 
on the way to shore, I breathed a 
sigh of relief: crisis averted. Or so 
I thought until I heard a rumbling behind me. I 
turned and saw that, by concentrating on M’s situa¬ 
tion, I’d compromised my own. The first wave of a 
large set was tumbling toward me, and all I could do 
was to align myself to dive into it and avoid being 
tumbled. In the next few minutes, I burned through 
hundreds of pounds of air and was pushed more than 
50 yards from the exit point. 

Amazingly, I wasn’t hurt, but it was the worst safe¬ 
ty situation I’ve been in in years. So I’ll stretch the 
metaphor for a final piece of advice: Take care of 
yourself. Software management is the place where 
the lofty ideals and technical buzzwords of the 
boardroom have to be aligned with human capabili¬ 
ty, fallibility and values. It’s even more stressful than 
debugging complex multi-threaded code. 

Sometimes a manager will face a choice of put¬ 
ting his or her own job performance on the line in 
order to protect someone who’s struggling. I think 
that’s an admirable thing to do, but it’s inherently 
risky. If it works out, it’s just another story, but if it 
doesn’t, things can get awfully rocky. I 



Larry O’Brien is a 
developer evangelist/ 
advocate forXamarin. 
Read his blog at 
www.knowing.net. 
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Analyst View 

BY MICHAEL FACEMIRE 

Take charge of your mobile strategy 


Michael Facemire 
is a senior analyst 
at Forrester Research. 


Mobile is more than just a 
new delivery channel; it is 
the engagement model for 
your company. 


□ Find this story at 
http://sdt.bz/41538 


S oftware developers are not usually the driving 
force behind creating the business case for 
mobile, but that doesn’t mean you aren’t involved 
in it. At a minimum, business leaders will look to 
you to help determine the overall cost of these ini¬ 
tiatives. These decisions have consequences, and 
IT is in the business of revisiting its past choices. 
It’s easy to decide to write a new CRM feature in 
Java or .NET based on the demands of your inter¬ 
nal infrastructure, but the mobile technology land¬ 
scape presents a whole different ballgame. 

The sheer number of mobile options makes it 
impossible to take a technology-first approach. So 
when a business leader approaches you for justifica¬ 
tion for mobile spending, or for help in better eval¬ 
uating a program’s value, be ready to assess many 
factors, including but not limited to your inventory 
of mobile development skills, the first applications 
you will build, time-to-market 
constraints, enterprise infrastruc¬ 
ture changes, and how all of this 
will coexist in a mobile strategy. 

Before beginning your cost 
assessment and resource plan¬ 
ning, you need to make sure that 
you have a well-defined mobile 
strategy in place. To make sure you cover all the 
bases, consider using what Forrester calls the 
POST method: 

Peopl e: Who will be the primary users of this 
app ? 

Objectives: What are the objectives of this 
app ? 

Strategy: What are the short-term and long¬ 
term strategies for this app? 

Technology: Which mobile technology meets 
the goals of this challenge? 

Having a strategy for your next mobile app isn’t 
the same as having a mobile app strategy. A Forrester 
survey from 2011 showed that increased use of 
mobile applications is improving the satisfaction of 
business users. The increase in mobile development 
creates a vacuum for certain skill sets, and increases 
IT budgets to fund these activities. And mobile 
changes time-to-market expectations: The historical 
expectations of 12- to 18-month development cycles 
have shrunk to perhaps four to six months. 

In our Mobile App Development Playbook, we 


address what you need to do as a result: 

Develop a current mobile strategy. The ide¬ 
al mobile solution for one business challenge may 
be far from ideal for another. You have to start 
somewhere, but don’t be so shortsighted to think 
that your most recent solution will fit all future 
mobile enablement efforts. Instead, be laser- 
focused on the current challenge and use this focus 
to select the proper technology. 

Assess the internal costs to fully implement 
this mobile strategy. If you aren’t thorough in 
assessing the end-to-end impact of your mobile ini¬ 
tiative, you’ll fall short. Will it require additional 
design and user experience skills? Will the enterprise 
infrastructure support the technologies required for 
mobile? Will your systems and infrastructure scale, 
or should you consider cloud as an option? 

Factor in maintenance, KPI assessments, 
and associated mobile app improvements. 
Delivery of the mobile app to end users is only the 
beginning of its cost. Listening to real-time user 
feedback—including analytics—will help you 
monitor usage and catch early bugs. This is crucial 
to your success but will consume resources. 

So why bother with all of this? Because enter¬ 
prise executives continually lament the cost over¬ 
runs of mobile development efforts. Mobile devel¬ 
opment is different, because mobile is more than 
just a new delivery channel; it is the engagement 
model for your company. 

The change mobile has on your organization will 
have an enormous impact on the skill set required by 
your developers. Mobile adds a new twist to client 
platform languages, user experience design funda¬ 
mentals, back-end enterprise data exchange, and 
testing and automation practices. For example, 
client-side Android development uses Java, but 
places a heavy emphasis on interaction with the user 
interface, which is written predominantly in XML. 

Is your organization unready to jump into all of 
these new waters, but needs a mobile app soon? 
Organizations with weak skills may want to consider 
working with a digital agency on an initial implemen¬ 
tation. Systems integrators can accelerate infrastruc¬ 
ture improvements for mobile. Finally, if delivery 
skills and infrastructure are concerns, mobile mid¬ 
dleware provides service integration/federation and 
tools that will benefit development teams. I 





Choose from a full 
week of learning, 
networking, and more 


TalHasiag&menE v 
Thu Techniques, © 

T«l tajtoniati&n O 

Agile Teilinii O 

CtorilfiOng] © 

MobUtteltag © 

ft rfonnaiiff fating © 

Special Ionia O 


April 28-May 3, 2013 

Orlando, Florida Rosen Shingle Creek 


f wars 




IN 


STAR 


stareast.techwell.com 


CHANNEL 

setter 


REGISTER BY 

MARCH 29,2013 

AND SAVE 

UP TO $200 


GROUPS OF 3* 
SAVE EVEN MORE 


SUNDAY __ 

Multi-day Training Classes Begin 

monday-tuesday 


31 In-depth Half- and Full-day Tutorials 

WEDNESDAY-THURSDAY - 

5 Keynotes, 42 Concurrent Sessions, 
the EXPO, Networking Events 
Receptions, Bonus Sessions, 


Testing & Quality Leadership Summit 
Workshop on Regulated Software 
Testing (WREST) 


Premier 

Sponsor: 


* Visual Studio 











































Mark Your Calendar! PfgJ)a ta 

— ® TECHCON 


San Franciso 

October 15-17,2013 


Get I Ready I o 



3 I in I Orlando 


BlackBerry® Jam Americas at BlackBerry Live™ will bring together mobile 
developers of every level who are eager to build the next great app 
for the BlackBerry® 10 platform. Session content will provide knowledge, 
insights and skills you need to take your apps to exciting new levels. 


BlackBerry Americas 

May 14-16,2013 I Orlando 

REGISTER TODAY 

www.blackberryjamconference.com/americas 













I www.sdtimes.com | April 2013 | SD Times | 


COLUMNS , 6i 


Guest View 

BY PETER NEUBAUER 

Get your community involved 



S oftware is becoming easier and easier to build, 
which means there is now more software than 
ever today. Growing a user community around a 
product has become both easier—because the 
technologies and connectivity required for com¬ 
munity building have greatly improved—and more 
difficult, as there are now more projects than ever 
competing for developers 7 attention. 

For developers, deciding what software to use 
involves a number of factors (note the order): 

• “Social prooP (Who else that I respect is 
using this?) 

• Ecosystem (Whom can I hire to develop this 
stuff?) 

• Ease of use and features (Does it meet my 
needs?) 

• Commercial backing (Who will help me once 
I 7 m in production?) 

• Price (Can I afford it?) 

Communities can generally be classified as two 
key roles: the contributor and the general member. 
Contributors are those who actively contribute 
code, talk, tweets, e-mails, etc. to the community, 
whereas the general members are largely con¬ 
sumers. Having a strong group of community con¬ 
tributors, who lend their name, time and reputation 
to the cause, adds significant weight when it comes 
to social proof and the other areas. 

Today, a thriving community is a company’s most 
effective tool for building a strong base of users, 
contributors and customers. Classic marketing 
channels have begun to wane in effectiveness when 
it comes to convincing potential users to adopt a 
product. Seth Godin has a great TED talk on this 
precise topic. Done right, building a community 
doesn’t have to be expensive, but it takes some seri¬ 
ous passion and focus. Before they start, they need 
to embrace some key principles. In our experience, 
these are the following: 

Value in relationships: This actually encom¬ 
passes not only our community message, but also a 
core message of our product: Neo4j. As fellow 
NoSQL community builder Meghan Gill put it: 
“Community is about building relationships, sharing 


Want more tips for growing your community? 
You can read David Intersimone's take at 
sdt.bz/41495. 


experiences, and fostering the exchange of knowl¬ 
edge.” The strongest relationships are built in real 
life, so start investing face-to-face time. 

Give and give: Karma is the currency of com¬ 
munities, and it is built via contributions. Make sure 
your company gives more than it takes. Community 
first! Encourage contributors to increase their kar¬ 
ma by writing, publishing and speaking about the 
things they love. Also, cover costs they incur while 
doing that for your product. 

Set up a higher goal: Nothing is more motivat¬ 
ing than a greater goal. For example, our mission at 
Neo Technology is to “Help the world make sense of 
data,” where Neo4j is fundamentally not just about 
being the best graph database, it’s also about helping 
humanity understand how the world is connected: 
through relationships, causality, influences, etc. 

Be honest and transparent: At Neo, we take it 
all the way, developing the product as open source at 
GitHub. The world doesn’t end if 
you have flaws in your product; if 
you are thinking the right way and 
can involve the contributors in fix¬ 
ing things or discussing solutions, 
you will gain more trust and cred¬ 
ibility than if you try to hide it. 

Find, nurture and care 
about your contributors: Contributors want to be 
involved. Nobody wants to be used. Contributors 
love things that need fixing; it gives them good kar¬ 
ma and turns them into evangelists. Shower them 
with recognition, swag and early access to new stuff! 

Turn all of your employees into contribu¬ 
tors: It is people, not customers, buying into your 
product. People follow people. Everyone in your 
company should be part of the inner circle of your 
tribe, even if they are not engineers. Your kids 
should want to wear your products’ t-shirts. 

Treat your community like customers: The 
scalability and contribution of a thriving and forgiv¬ 
ing community (that finds bugs, and provides feed¬ 
back, evangelism and improvements) are a function 
of the quality of the interaction and response with 
community members. Treat the contributors and 
community members the same way as customers! 

These are principles we embrace every day, and 
they are important ingredients in making our com¬ 
munity thrive. Give them a try! I 


Peter Neubauer is 
VP of community 
at Neo Technology. 


Contributors love things 
that need fixing; it gives 
them good karma and turns 
them into evangelists. 


□ Find this story at 
http://sdt.bz/41495 
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Industry Watch 


BY DAVID RUBINSTEIN 


David Rubinstein is 
editor-in-chief of SD Times. 


Back to best-of-breed 

A s I celebrate my bar mitzvah year covering 
t 


'The social flow of 
information has to cross 
silos that weren't meant to 
talk to each other.' 


□ Find this story at 
http://sdt.bz/41548 


the software development industry (yes, SD 
Times has been publishing for 13 years now!), 
we’ve seen the vendor lock-in/best-of-breed pen¬ 
dulum swing both ways. 

At first it was everyone versus Microsoft and 
IBM, with smaller software providers and the open- 
source world decrying the control of the monolithic 
giants. But after a while, people began to complain 
when their systems failed, and the providers of the 
various best-of-breed tools said, “Its not our piece 
that’s causing your problem,” making troubleshoot¬ 
ing and remediation a nightmare. Folks wanted a 
single place to point their fingers 
when things went awry, so the 
pendulum swung back again to 
bundled “suite” solutions from 
single software providers that had 
tight integrations. 

Now, development software 
provider Tasktop wants the pen¬ 
dulum to swing back the other way, with its cre¬ 
ation of a manifesto and architectural patterns for 
what it calls “software life-cycle integration.” So 
late last month, the company released Mylyn M4, 
an open implementation of its model for SLI. 

“It’s time we stopped looking at ALM [applica¬ 
tion life-cycle management] as something we get 
from one vendor, and look at it as an architecture,” 
said Mik Kersten, CEO of Tasktop. 

There are macro forces at work—notably the 
cloud and mobility—pushing the pendulum back 
to being able to mix and match tools for specific 
needs. Requirements are different, development is 
different and testing is different, so a traditional 
ALM suite might not meet those needs. 


Best-of-breed is no longer a choice; it’s a reality, 
according to Kersten, but he sees the No. 1 prob¬ 
lem with best-of-breed for ALM as a lack of inte¬ 
gration. RESTful APIs offer “so much hope, and a 
bunch of confusion. There’s a new wave of data 
integration with a new value chain attached to that. 
We’re creating an API economy.” 

With a software integration architecture, devel¬ 
opers could use Atlassian tools on demand via 
APIs, for example, or TFS and Git. In fact, this 
already is happening in the industry. But Kersten 
said a new data model is required “if we’re going to 
hook up the life cycle.” 

His main point: “The social flow of information 
has to cross silos that weren’t meant to talk to each 
other.” 

To that end, Tasktop is defining what it calls a 
collaborative life-cycle bus, something that is high¬ 
ly scalable and that allows comments to flow from 
ops to dev to the business side, connecting them 
with traceability and offering large-scale agility. 

With that, as demonstrated in Mylyn M4, are pat¬ 
terns and taxonomies for integrating back-end sys¬ 
tems and outside partners for a lean software life 
cycle. The open-source project is a community-fac¬ 
ing effort that will put out intellectual property for 
users to use, review, comment on and get involved in 
developing out further. Kersten said Tasktop is mov¬ 
ing the project to OASIS because, he said, Tasktop 
believes “it’s the core footprint needed for SLI.” 

So it seems the APIs and tools are in place for 
the kind of loose coupling Kersten described. It’s 
the commonality of architecture and taxonomy, 
along with this collaborative bus, that he hopes will 
drive this effort toward best-of-breed tooling even 
further. I 


Events Calendar 


DATE 

SHOW 

CITY 

SPONSOR 

LINK 

April 14-17 

Evolve 2013 

Austin 

Xamarin 

xamarin.com/evolve 

April 15-17 

InfoSec World Conf. & Expo 

Orlando 

MIS Training Institute 

www.misti.com 

April 21-24 

CA World 

Las Vegas 

CA 

www.ca.com/caworld.aspx 

April 22-25 

Design West 

San Jose 

UBM Electronics 

www.ubmdesign.com/sanjose 

April 24-26 

Perforce Merge 2013 

San Francisco 

Perforce 

www.perforce.com/user-conferences 

April 28-May 3 

IBM Impact 

Las Vegas 

IBM 

www.ibm.com/software/websphere/events/impact 

April 28-May 3 

IDUG (DB2 Users Group) 

Orlando 

IDUG 

www.idug.org 


For a more complete calendar of U.S. software development events, see www.sdtimes.com/calendar. Information is subject to change. Send news about upcoming events to events@bzmedia.com. 











How InterSystems invented an application platform 
that includes the key to rapid development. 



TheSecretIsGlobals.com 


INTERSMMS 


© 2013 InterSystems Corporation, Cambridge, MA. All rights reserved. InterSystems is a registered trademark of InterSystems Corporation. 4-13 Globals5SDTi 








Introducing Datazen 

The easiest way to create mobile BI dashboards 
from Excel, cloud, or enterprise data sources. 



Available now for iS Windows 8. 

datazen.com 


DATAZEN 

Your Doto in a Whole New Light 


Build and deploy a modern BI presentation layer from your existing data sources 
in a fraction of the time required by legacy tools. And have fun doing it. 












































































































AnDevCon 

The Android Developer Conference 


BOSTON • May 28-31,2013 


The Westin Boston Waterfront 



Get the best real-world Android 
developer training anywhere! 

• Choose from more than 75 classes 
and tutorials 

• Network with speakers and other 
Android developers 

• Check out more than 
40 exhibiting companies 

I 


A BZ Media Event Follow us: twitter.com/AnDevCon 


AnDevCon™ is a trademark of BZ Media LLC. Android™ is a trademark of Google Inc. Google’s Android Robot is used under terms of the Creative Commons 3.0 Attribution License. 
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Mobile Ads Redefined 
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DAPTIVe DIGITAL 


TECHNOLOGIES 


AnDevCon is the biggest 
most info-packed, most practical 
Android conference in the world! 

■ From Jelly Bean to Project Butter, AnDevCon 
has all the latest info! 

■ Attend sessions that cover app development, 
deployment, design, management, and more 

■ Network and connect with hundreds of 
experienced developers and engineers 
like yourself 


Produced by 


BZ Media 

rt TWy • SOFTWARE DEVELOPMENT 

SDTimes 



“It’s a great place to come and learn from those who have been 
through the experience of both development and marketing of 
Android apps.” 

—Dan Heath, Principal Systems Developer, SAS 

“AnDevCon is one of the best networking and information hubs 
available to Android developers.” 

—Nate Vogt, Android Developer, Willow Tree Apps 

“If you want to get info on Android development, then this is 
the place to come to.” 

—Ats Jenk, Senior Software Engineer, Microsoft Skype Division 
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Letter From 
the Chairman 

Dear colleague, 

Let’s go to Boston! Let’s do Android! Let’s do 
Android in Boston! 

After four info-packed technology conferences in 
the San Francisco Bay Area, AnDevCon: The Android 
Developer Conference is coming to the Hub. 

Beantown. Home of the Red Sox, the New England 
Patriots, the Celtics, the Bruins, the Boston 
Tea Party, the U.S.S. Constitution and Bunker Hill. 

Boston is also a tech hub; think about Route 128, which was 

Silicon Valley long before Silicon Valley ever existed. What a great place, 

a fitting place, for us to gather to dig deep into everything Android. 

No matter what your interest in Android, no matter what your level of 
experience with the mobile platform, we welcome you to AnDevCon 
Boston, May 28-31, 2013. Building on the success of our four previous 
technical conferences, AnDevCon Boston continues to be 100% focused 
on enhancing your skills as an Android developer. 

Produced by BZ Media—publisher of SD Times, the leading magazine for 
software development managers—AnDevCon is the biggest, most info- 
packed, most practical Android conference in the world. 

At AnDevCon Boston, you’ll be able to choose from 80+ tutorials and 
technical classes at all levels, from overview to intermediate to advanced. 
Come learn what fits your needs in four separate technical areas: 

Developer Essentials: These technical classes and tutorials cover all 
programming topics from overview to intermediate to advanced. 

Android Business: These classes and tutorials teach you the most 
effective ways of distributing and selling Android apps, including how to 
maximize profit through Google Play. 

Android Tablets & Beyond: These classes and tutorials are specific to 
commercial devices beyond smartphones, including tablets, Google TV 
and other platforms. 

Embedded Android: These classes and tutorials bring you close to the 
hardware in custom boards and devices. 

The technical classes and tutorials are only part of the benefit of 
attending AnDevCon Boston this Spring. Meet the smartest, 
hardest-working faculty in the Android universe. Mingle with fellow 
attendees, and talk shop during meals and receptions. Be inspired by 
keynotes, be informed by general sessions, be impressed by the tools 
in the Expo Hall. It’s all waiting for you. 

Forget about the Green Monster. Let’s get to work building apps for the 
Green Robot. See you at AnDevCon Boston! 

Alan Zeichick 
Conference Chairman 
& Life-Long Red Sox Fan 


Event Schedule 


Tuesday, May 28 

7:30 am - 7:00 pm 

Registration Open 

8:00 am - 9:00 am 

Morning Coffee 

9:00 am - 10:30 am 

Tutorials 

10:30 am - 10:45 am 

Coffee Break 

10:45 am - 12:30 pm 

Tutorials 

12:30 pm - 1:30 pm 

Lunch 

1:30 pm - 3:00 pm 

Tutorials 

3:00 pm - 3:15 pm 

Coffee Break 

3:15 pm - 5:00 pm 

Tutorials 

Wednesday, May 29 

7:30 am - 7:00 pm 

Registration Open 

7:30 am - 8:30 am 

Morning Coffee 

8:30 am - 8:45 am 

Welcome Notes by Conference Chairman, 
Alan Zeichick 

8:45 am - 9:45 am 

Keynote - Qualcomm 

9:45 am - 10:00 am 

Coffee Break 

10:00 am - 11:15 am 

Technical Classes 

11:30 am - 12:45 pm 

Technical Classes 

1 2:45 pm - 1:45 pm 

Lunch 

1:45 pm - 2:1 5 pm 

Sponsored Sessions 

2:30 pm - 3:45 pm 

Technical Classes 

3:45 pm - 4:00 pm 

Coffee Break 

4:00 pm - 5:15 pm 

Technical Classes 

5:30 pm - 7:00 pm 

Lightning Talks 

7:30 pm - 9:30 pm 

Fireside Chats 

Thursday, May 30 

7:30 am - 7:30 pm 

Registration Open 

7:30 am - 8:30 am 

Morning Coffee 

8:30 am - 9:45 am 

Technical Classes 

10:00 am - 11:00 am 

Keynote - Twitter 

11:00 am - 11:30 am 

Coffee Break 

11:00 am - 7:00 pm 

Exhibit Hall Open 

11:30 am - 12:45 pm 

Technical Classes 

1 2:45 pm - 1:45 pm 

Lunch 

1 2:45 pm - 1:45 pm 

Women in Android Luncheon 

1:45 pm - 3:00 pm 

Technical Classes 

3:00 pm - 3:30 pm 

Coffee, Ice Cream 

3:30 pm - 4:00 pm 

Sponsored Sessions 

4:1 5 pm - 5:1 5 pm 

Keynote - Tumblr 

5:15 pm - 7:00 pm 

Networking Reception 

Friday, May 31 

7:30 am - 4:45 pm 

Registration Open 

7:30 am - 8:30 am 

Morning Coffee 

8:30 am - 9:45 am 

Technical Classes 

9:45 am - 10:00 am 

Coffee Break 

10:00 am - 11:15 am 

Technical Classes 

11:00 am - 2:30 pm 

Exhibit Hall Open 

11:45 am - 12:15 pm 

Sponsored Sessions 

1 2:1 5 pm - 1:1 5 pm 

Lunch 

1:15 pm - 2:00 pm 

Winner’s Circle Prizes Announced 
in Exhibit Hall 

2:00 pm - 3:15 pm 

Technical Classes 

3:15 pm - 3:30 pm 

Coffee Break 

3:30 pm - 4:45 pm 

Technical Classes 

4:45 pm 

Conference Closes 



Alan Zeichick 
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Special Events 

Wednesday, May 29 



8:30 am - 8:45 am 




8:45 am - 9:45 am 




5:30 pm - 7:00 pm 


7:30 pm - 9:30 pm 


Welcome Notes 

Introduction delivered 
by Conference Chairman, 
Alan Zeichick 



Keynote 



Leon Farasati, 

Staff Product Manager 
for Qualcomm 
Technologies, Inc. 


Qualco/ww 


Lightning Talks 

Learn something new 
in a handful 
of short, targeted 
talks, PLUS names 
will be drawn for 
free giveaways! 


' ( 


C| 


Fireside Chats 

Android Development 
Growing Up 
with Robert Green and 
Manfred Moser 

We have moved from developing an app on our 
own, to working in large teams with designers, Ul 
specialists and a lot of other people. We are also 
working with version-control and code-review sys¬ 
tems, issue trackers, client support forums, etc. 
However, this all needs to be paid for, which 
requires a working business and some regular 
income. How can you make it all work? 

Ask panel of experts and your peers all those 
burning questions: Where do you get the money to 
pay for all this? Can you grow your efforts on a tiny 
budget? Should you just outsource it all? The experts 
are here to share their tips with you, so join us! 


Thursday, May 30 


10:00 am - 11:00 am 




11:00 am - 7:00 pm 


a 


12:45 pm - 1:45 pm 


’ 


Keynote: 

Developing for Billions 

Jeff Seibert, 

Director of Engineering 
at Twitter 



Exhibit Hall Open 

Come visit the growing 
and evolving network of 
technical experts in our 
Exhibit Hall. 





Women in Android Luncheon 

Hosted by Lisa Vaas, freelancer for technology 
publications, including CIO Magazine, ComputerWorld 
and PC Magazine 

Lisa Vaas is pleased to host a luncheon for all women attending 
AnDevCon. What are your challenges as an 
Android developer? What are your proudest 
triumphs? Please bring stories to share as we 
explore all aspects of being a woman in this 
exciting field. Come prepared to connect, net¬ 
work, socialize, tell tales, and listen to your 
peers from across the Android development industry. 


4:15 pm - 5:15 pm 



3:00 pm - 3:30 pm 


5:15 pm - 7:00 pm 



Networking Reception in the Exhibit Hall 
The reception offers a chance to network with 
fellow professionals in a casual atmosphere. 

Make new friends while enjoying 
delicious food and beverages. 


Keynote: 

Making Android Look Good 

Chris Haseman, 

Lead Android Developer 
at Tumblr 




and 

Zack Sultan, 

Designer at Tumblr 




Coffee, Ice Cream 
in the Exhibit Hall 



Friday, May 31 
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Special Events 


Friday, May 31 


1:15 pm - 2:00 pm 


Exhibit Hall Open 

It’s a new day and another chance 
to talk one-on-one with Android 
experts in the Exhibit Hall. 



Winner's Circle 
prizes announced 
in Exhibit Hall 



Keynotes 


Wednesday, May 29 

8:45 am - 9:45 am Q UALCO/W W 

Keynote 

Leon Farasati, 

Staff Product Manager for 
Qualcomm Technologies, Inc. 



Leon Farasati is a staff product manager for Qualcomm. He is responsible for 
Qualcomm Snapdragon development platforms, including Qualcomm Snapdragon 
MDP and Dragonboard. He has more than 10 years of experience in various design 
engineering and product-management roles in the computing industry. Prior to joining 
Qualcomm, he spent six years at NVIDIA. Leon holds a bachelors of Applied Science 
in Computer Engineering from the University of Waterlooand a masters degree in 
Management Science and Engineering from Stanford University. 


Thursday, May 30 

10:00 am - 11:00 am 

Developing for Billions 

Jeff Seibert, 

Director of Engineering at Twitter 




Jeff Seibert, Director of Engineering at Twitter, is an experienced serial entrepreneur 
with a passion for deeply technical Internet software. Jeff was the CEO of Crashlytics, 
which he cofounded in 2011 and was bought by Google in 2013. Crashlytics delivered 
crash-analysis tools for iOS and Android apps via an SDK that reached 300 million 
mobile devices worldwide. Jeff gained experience at Apple in both marketing and 
engineering capacities and led Stanford University’s Entrepreneurial Thought Leaders 
seminar series as co-coordinator. He was selected as a Mayfield Fellow in 2007 and 
received a B.S. in Computer Science from Stanford University in 2008. 



4:15 pm - 5:,5 pm fifTTT^fb. 

Making Android 
Look Good 

Chris Haseman, 

Lead Android Developer at Tumblr 
and 

Zack Sultan, 

Designer at Tumblr 


Chris Haseman and Zack Sultan of Tumblr are tired of Android’s reputation for being 
ugly. To that end, they’ll keynote about their own journey through mistakes and pitfalls 
while developing the Ul forTumblr's Android application. 

Find out which of Android’s many design guidelines are indispensable; how to 
speak with Android’s visual vocabulary; the workflow used to develop Tumblr’s appli¬ 
cation; and how to break the rules and get away with it. 

You'll leave with a better understanding of how to make the most out of Android’s 
design rules—and the tricks to avoid the countless mistakes these two made along 
the way. 
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Conference Planner 


TECHNICAL LEVELS 

■ Overview 

■ Intermediate 


TOPIC AREAS 

DEV Developer Essentials 
BIZ Android Business 




■ Advanced 

ATB 

EMB 

Android Tablets and Beyond 
Embedded Android 

Tuesday, May 28 

Click or touch class title to read description. 

TIME 

TITLE 

INSTRUCTOR TECHNICAL LEVEL TOPIC AREA 

7:30 am - 7:00 pm 

Registration Open 




9:00 am - 12:30 pm 

MORNING TUTORIALS (10:30 am - 10:45 am Coffee Break) 




FULL-DAY TUTORIAL 

Android Development Boot Camp 

Elon Flegenheimer and Mike Wolfson 

■ 

DEV 

FULL-DAY TUTORIAL 

Embedded Android Tutorial 

Karim Yaghmour 

■ 

EMB 

HALF-DAY TUTORIAL 

2D Physics Game Half-Day Hackathon 

Robert Green 

■ 

DEV 

HALF-DAY TUTORIAL 

Easy Mobile: Making Your Application Easier to Use 

Jason Mark 

■ 

DEV 

HALF-DAY TUTORIAL 

Talk to Your Toaster: Exploring Embedded with Arduino, Part 1 

Dave Smith 

■ 

EMB 

12:30 pm - 1:30 pm 

Lunch 




1:30 pm - 5:00 pm 

AFTERNOON TUTORIALS (3:00 pm - 3:15 pm Coffee Break) 




FULL-DAY (CONTINUED) 

Android Development Boot Camp 

Elon Flegenheimer and Mike Wolfson 

■ 

DEV 

FULL-DAY (CONTINUED) 

Embedded Android Tutorial 

Karim Yaghmour 

■ 

EMB 

HALF-DAY TUTORIAL 

Building Game Effects Like the Pros 

Bob Heubel and Peter van der Linden 

■ 

DEV 

HALF-DAY TUTORIAL 

Optimizing Your App for a Wide Range of Devices 
and Multiple Screens 

Graham Holker 

■ 

DEV 

HALF-DAY TUTORIAL 

Pretty Mobile: Making Your Application Look Sexy 

Jason Mark 

■ 

DEV 

HALF-DAY TUTORIAL 

Talk to Your Toaster: Developing Android Accessories, Part II 

Dave Smith 

■ 

DEV 


TECHNICAL LEVELS 

Overview: No previous knowledge of these classes' subject is 
required, and the sessions will be high-level introductions of the topic. 

Intermediate: These broad technology sessions emphasize capabili¬ 
ties and how things work. As appropriate, the instructor will show 
examples or code. 

Advanced: These sessions teach attendees how to implement a 
solution. As appropriate, the instructor will include detailed samples 
or code. 

TOPIC AREAS 

Developer Essentials: These technical classes and tutorials are for all 
Android developers, and cover all programming topics. 

Android Business: These classes and tutorials cover the most effec¬ 
tive ways of distributing and selling Android apps, including how to 
maximize profit through Google Play. 

Android Tablets and Beyond: These classes and tutorials are specif¬ 
ic to commercial devices beyond smartphones, including tablets, 
Google TV, and other platforms. 

Embedded Android: These classes and tutorials are for developers 
working close to the hardware, such as on custom devices, or diving 
deep into the internals of embedded Linux. 



“AnDevCon is a valuable resource to the Android 
community for both knowledge and networking.” 

—Dan Martin, Android Developer, Fuzz Productions 

“AnDevCon is a lot of fun. It has friendly people to interact 
with, as well as share ideas, discover collaboration 
possibilities, and learn a lot of new, bleeding-edge stuff.” 

—Lorand Krucz, Senior Developer, SoftVision 

“It’s good for beginners to experts!” 

—Jong Rip Lee, Software Engineer, Laser Technology, Inc. 
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Conference Planner 


TECHNICAL LEVELS 

■ Overview 

■ Intermediate 

■ Advanced 


TOPIC AREAS 

DEV Developer Essentials 

BIZ Android Business 

ATB Android Tablets and Beyond 

EMB Embedded Android 


Wednesday, May 29 4 Click or touch class title to read description. 


TIME 

TITLE 

INSTRUCTOR 

TECHNICAL LEVEL 

TOPIC AREA 

7:30 am - 7:00 pm 

Registration Open 





8:30 am - 8:45 am 

Welcome Notes by Conference Chairman, Alan Zeichick 





8:45 am - 9:45 am 

Keynote - Leon Farasati, Qualcomm 





9:45 am - 10:00 am 

Coffee Break 





10:00 am - 11:15 am 

A Deep Dive into Renderscript 

Larry Schiefer 


■ 

DEV 


Android Fundamentals: What 1 Wish 1 Knew When 1 Started! 

Chris Haseman 


■ 

DEV 


Android Performance Tips 

Godfrey Nolan 


■ 

DEV 


BLE (Bluetooth Low Energy) Is Finally Here for Android! 

Dario Laverde 


■ 

DEV, EMB 


Developer Tools Essentials, Part 1 Overview 

Mike Wolfson 


■ 

DEV 


Introduction to Android Animation 

Jason Ostrander 


■ 

DEV 

11:30 am - 12:45 pm 

Battle-Tested Patterns in Android Concurrency 

Doug Stevenson 


■ 

DEV 


Developer Tools Essentials, Part II Advanced 

Mike Wolfson 


■ 

DEV 


Dive into Android Fragments 

Donn Felker 


■ 

DEV 


Enterprise Infrastructure, Tools and Tricks for Teams 
Developing Android Applications 

Manfred Moser 


■ 

DEV 


Leveraging Android’s Linux Heritage 

Karim Yaghmour 


■ 

EMB 


Ul Functional Testing with uiautomator 

Mark Murphy 


■ 

DEV 

12:45 pm - 1:45 pm 

Lunch 





1:45 pm - 2:15 pm 

Sponsored Sessions - Details to come 





2:30 pm - 3:45 pm 

Building Your First Social App 

Christine Abernathy and Bear Douglas 

■ 

DEV 


Java and the Android Stack: A Security Perspective 

Pragati Ogal Rai 


■ 

DEV 


Optimizing Android Ul: Tips for Creating Fast 
and Responsive Applications 

Jason Ostrander 


■ 

DEV 


Patterns for Connected Apps, Part 1 

Mark Wickham 


■ 

DEV 


Renderscript Rosetta Stone 

Morrison Chang 


■ 

DEV 


Tips, Tricks and Secrets of the Android Multimedia APIs 

Doug Stevenson 


■ 

DEV 

3:45 pm - 4:00 pm 

Coffee Break 





4:00 pm - 5:15 pm 

Advanced Patterns for Connected Apps, Part II 

Mark Wickham 


■ 

DEV 


Agile Android 

Godfrey Nolan 


■ 

DEV 


Android Application Security by Example 

Pragati Ogal Rai 


■ 

DEV 


Android as the New Embedded Linux 

Karim Yaghmour 


■ 

EMB 


Building an Efficient Background Sync Engine 

Chris Haseman 


■ 

DEV 


Making Sticky Social Apps 

Christine Abernathy and Bear Douglas 

■ 

DEV 

5:30 pm - 7:00 pm 

Lightning Talks 






7:30 pm - 9:30 pm 


Fireside Chats 
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Conference Planner 


TECHNICAL LEVELS 

■ Overview 

■ Intermediate 

■ Advanced 


TOPIC AREAS 

DEV Developer Essentials 

BIZ Android Business 

ATB Android Tablets and Beyond 

EMB Embedded Android 


Thursday, May 30 Click or touch class title to read description. 


TIME TITLE INSTRUCTOR TECHNICAL LEVEL TOPIC AREA 


7:30 am - 7:30 pm 

Registration Open 



8:30 am - 9:45 am 

Android OpenGL ES Essentials, Part 1 and II 

Robert Green 

■ DEV 


Creating More with Less 

Donn Felker 

■ DEV 


Effective Android HTTP, Parts 1 and II 

Jesse Wilson 

■ DEV 


Creating ePub Books for Android 

Jason Mark 

■ DEV 


Hacking APKs for Fun and Profit (Mostly for Fun), Part 1 and II 

David Teitelbaum 

■ DEV 


Inside Android’s User Interface 

Karim Yaghmour 

■ EMB 


Mastering the Android Touch System 

Dave Smith 

■ DEV 

10:00 am - 11:00 am 

Keynote - Developing for Billions by Jeff Seibert, Twitter 



11:00 am - 11:30 am 

Coffee Break 



11:00 am - 7:00 pm 

Exhibit Hall Open 



11:30 am - 12:45 pm 

Android OpenGL ES Essentials, Parts 1 and II 

Robert Green 

■ DEV 


Bringing up Android on Your Favorite X86 Workstation 
or Virtual Machine, Part 1 

Ron Munitz 

■ EMB 


Exploring Android SDK Add-ons for Devices 

Larry Schiefer 

■ ATB 


Effective Android HTTP, Part 1 and II 

Jesse Wilson 

■ DEV 


Hacking APKs for Fun and Profit (Mostly for Fun), Part 1 and II 

David Teitelbaum 

■ DEV 


Targeting App Success, Part 1 

Nathan Mellor 

■ BIZ 

12:45 pm - 1:45 pm 

Lunch 



12:45 pm - 1:45 pm 

Women in Android Lunch 



1:45 pm - 3:00 pm 

Android Platform Security Underpinnings 

Marko Gargenta 

■ DEV 


Bringing up Android on Your Favorite x86 Workstation 
or Virtual Machine, Part II 

Ron Munitz 

■ EMB 


Building NFC-Enabled Android Applications 

Jason Weiss 

■ DEV 


Connecting the Dots: Bluetooth in Your Application 

Dave Smith 

■ DEV 


Effectively Leveraging Open Source 

Jake Wharton 

■ DEV 


Incorporating Touch Feedback in Your Apps to Improve UX 

Bob Heubel and Peter van der Linden ■ DEV 


Targeting App Success, Part II 

Nathan Mellor 

■ BIZ 

3:00 pm - 3:30 pm 

Coffee, Ice Cream in Exhibit Hall 



3:30 pm - 4:00 pm 

Sponsored Sessions - Details to come 



4:15 pm - 5:15 pm 

Keynote - Making Android Look Good by Chris Haseman and Zack Sultan, Tumblr 


5:15 pm - 7:00 pm 

Networking Reception in Exhibit Hall 
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TECHNICAL LEVELS TOPIC AREAS 


Conference Planner 

■ Overview 

■ Intermediate 

■ Advanced 

DEV Developer Essentials 

BIZ Android Business 

ATB Android Tablets and Beyond 

EMB Embedded Android 

Friday, May 31 

Click or touch class title to read description. 

TIME 

TITLE 

INSTRUCTOR TECHNICAL LEVEL TOPIC AREA 

7:30 am - 4:45 pm 

Registration Open 



8:30 am - 9:45 am 

Designing for Android 

Chris Huban and Vijay Penemetsa 

DEV 


Introduction to Continuous Integration Server Usage 

Focusing on Android Development 

Manfred Moser 

■ DEV 


Maps v2... and You! 

Mark Murphy 

■ DEV 


Getting Mobile with Android and Windows Azure Mobile 

Chris Risner 

■ DEV 


Save the Battery! App Design and Testing 
for Better Power Consumption 

Moe Tanabian 

■ DEV 


The Fragment Transition, Part 1 and II 

Corey Leigh Latislaw 

■ DEV, ATB 

9:45 am - 10:00 am 

Coffee Break 



10:00 am - 11:15 am 

Building HTML5 Apps for Phone or Tablet 

Joe Stagner 

DEV 


Protecting Your Android Source Code 

Godfrey Nolan 

■ DEV 


Little RASCAL 0.07—A License to Learn 

Gerry Schenk 

■ EMB 


The Fragment Transition, Part 1 and II 

Corey Leigh Latislaw 

■ DEV, ATB 


Tracking User Behavior Creatively 

Kiana Tennyson 

■ DEV 


You Want to Build the Next Instragram? 

Moe Tanabian 

■ DEV 


Automated App Builds Made Easy 

Geoff Matrangola 

■ DEV 

11:00 am - 2:30 pm 

Exhibit Hall Open 



11:45 am - 12:15 pm 

Sponsored Sessions — Details to come 



12:15 pm - 1:15 pm 

Lunch 



1:15 pm - 2:00 pm 

Winner’s Circle Prizes Announced in Exhibit Hall 



2:00 pm - 3:15 pm 

Advanced Techniques for Developing Powerful 

Yet Lightweight Android SDKs 

Marc Richards 

DEV 


Beautiful Android on a Shoestring 

Chiu-Ki Chan 

■ DEV 


Becoming More Effective with the Android Emulator 

Luis de la Rosa 

■ DEV 


Handling the Complexities of Images in Android, Part 1 and II 

James Halpern 

■ DEV 


Little Apps, Big Car Crashes 

Joey Grover 

■ DEV 


Multi-user Android 

Marko Gargenta 

■ DEV 


Building REST Server APIs for Mobile Apps in PHP 

Joe Stagner 

■ DEV 

3:15 pm - 3:30 pm 

Coffee Break 



3:30 pm - 4:45 pm 

A Hands-on Guide to Product-Centric Mobile Apps 
and the Internet of Things 

Christian Floerkemeier 

DEV, BIZ 


A Primer to SyncAdapters 

Kiana Tennyson 

■ DEV 


Handling the Complexities of Images in Android, Part 1 and II 

James Halpern 

■ DEV 


Intent + Service + Content Provider = Plug-in Architecture 

Jason Weiss 

■ DEV 


Reusable Custom Components 

Chiu-Ki Chan 

■ DEV 


4:45 pm Conference Closes 
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Tutorials Tuesday, May 28 

Full-Day Tutorials 
9:00 am - 5:00 pm 

Android Development Boot Camp ww* 

Elon Flegenheimer and Mike Wolfson 

New to Android development? This tutorial provides a hands-on intro¬ 
duction to Android application development and the tools essential to 
the process. Beyond an introduction to the basics, this tutorial also cov¬ 
ers some of the common hurdles met with development, and how to 
overcome them. You will be equipped with the fundamentals needed to 
get the most out of AnDevCon, so you will be ready to tackle real-world 
Android development tasks. We will progress through the key concepts 
of Android application development with many code examples and 
hands-on modules. Topics will be covered in a lecture, demo and hands- 
on approach. You will also build an Android app of your own where you 
can apply what you learn in the tutorial. Main points we will cover: 

• Tools overview and Eclipse kick-start 

• Platform fundamentals 

• Language overview (Activities, Intents, Fragments) 

• Accessing Web services 

• Debugging fundamentals 

Note: Bring your laptop with the Android SDK pre-installed. Time will 
not be spent doing this during the tutorial. You can find installation 
instructions at developer.android.com/sdk/index.html. 

Level: Overview Topic Area: Developer Essentials 

Embedded Android Tutorial wm* 

Karim Yaghmour 

jMjrjgj While Android has been created for mobile devices—phones 
W IB Hfil i f first and now tablets—it can nonetheless be used as the basis 
for any touch-screen system, whether it be mobile or not. Essentially, 
Android is a custom-built embedded Linux distribution with a very elabo¬ 
rate and rich set of user-space abstractions, APIs, services and virtual 
machines. This one-day tutorial is aimed at embedded developers wanting 
to build touch-based embedded systems using Android. It will cover 
Android from the ground up, enabling developers to get a firm hold on the 
components that make up Android and how they need to be adapted to an 
embedded system. Specifically, we will start by introducing Android's over¬ 
all architecture, and then proceed to peel Android’s layers one-by-one. 

First, we will cover the Android Open Source Project, the open- 
source project under which Android’s source code is released. We will 
then dig into the native Android user space and Android’s power tools, 
and cover how hardware support is implemented in Android. Given that 
Android is built on top of Linux, we will also go over some embedded 
Linux tricks and see how the kernel is modified to support the Android 
user space. 

In addition, we will look at the System Server, the Android Frame¬ 
work and core Android applications, and how to customize them. 

Level: Intermediate Topic Area: Embedded Android 

Half-Day Tutorials 
9:00 am - 12:30 pm 

2D Physics Game Half-Day Hackathon wm 

Robert Green 

Always wanted to build the next Angry Birds, but not sure how to get 
started? Then attend this half-day tutorial that will start with an overview 
of the popular Box2D physics engine and will end with you demoing 


(mm This icon indicates code will be shown in the session. 

(gram This icon indicates a session has not been previously 
offered at AnDevCon. 


TECHNICAL LEVELS 

Overview: No previous knowledge of these classes’ subject is 
required, and the sessions will be high-level introductions of the topic. 

Intermediate: These broad technology sessions emphasize capabili¬ 
ties and how things work. As appropriate, the instructor will show 
examples or code. 

Advanced: These sessions teach attendees how to implement a 
solution. As appropriate, the instructor will include detailed samples 
or code. 

TOPIC AREAS 

Developer Essentials: These technical classes and tutorials are for all 
Android developers, and cover all programming topics. 

Android Business: These classes and tutorials cover the most effec¬ 
tive ways of distributing and selling Android apps, including how to 
maximize profit through Google Play. 

Android Tablets and Beyond: These classes and tutorials are specif¬ 
ic to commercial devices beyond smartphones, including tablets, 
Google TV, and other platforms. 

Embedded Android: These classes and tutorials are for developers 
working close to the hardware, such as on custom devices, or diving 
deep into the internals of embedded Linux. 


your new game prototype! Using the BatteryTech Engine, the hackathon 
will focus on using the popular scripting language Lua to build and con¬ 
trol a 2D physics world. You will receive the resources required to build 
and run an Android version of your new game, as well as first-hand tech¬ 
nical assistance throughout the tutorial. Intermediate programming expe¬ 
rience is required, and you must bring either a Windows or OS X laptop 
capable of running OpenGL 2.0. 

Level: Intermediate Topic Area: Developer Essentials 

Easy Mobile: Making Your Application 
Easier to Use ww* 

Jason Mark 

This hands-on tutorial will consist of critiques and walkthroughs of your 
applications with an eye to making them easier to use. We will do some 
user testing and bounce ideas off each other. We will hack up screens 
and look for ways to better meet your goals. Our goal is to make sure 
that everyone leaves this tutorial with at least one to three usability 
improvements made to their application, and a list of two or three other 
things that can be done. 

Level: Intermediate Topic Area: Developer Essentials 
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Talk to Your Toaster: Exploring Embedded with 
Arduino, Part I C13IH ww* 

Dave Smith 

In this half-day tutorial, we will explore the Arduino embedded develop¬ 
ment platform, and how developers can leverage it to quickly build 
accessory devices that monitor input from the outside world and use 
that information to control other devices or communicate with a host, 
such as an Android device. You will learn about the different Arduino 
hardware configurations that are available, and how they differ. We will 
explore basic concepts of microcontroller application development, such 
as interrupts, timers, analog and digital I/O. We will also discuss the fea¬ 
tures of the Arduino programming language and how to write applica¬ 
tions using the Arduino IDE and development tools. 

Although this tutorial is not directly hands-on, sample code for the 
Arduino examples will be provided. No specific knowledge of Arduino is 
required; however, a basic understanding of programming in C will be 
helpful. To build on information learned in this tutorial, attend Part II later 
in the day. 

Level: Intermediate Topic Area: Embedded Android 

Half-Day Tutorials 
1:30 pm - 5:00 pm 

Building Game Effects Like the Pros fll9W) nmn 

Bob Heubel and Peter van der Linden 

Come learn how to use vibration events in your Android games and 
apps. This half-day tutorial shows you the basic Android vibrate method, 
and then reveals how the pros really do it. We’ll describe and explain 
the methods used by Sega, Rockstar Games and most of the Android 
hardware OEMs like Samsung, LG and Toshiba. You will learn how to 
simulate the feel of a machine gun, explosion or simple Ul vibration 
events using predefined effects from a library. We will show how to cre¬ 
ate dynamic vibration events that modify effect magnitude or frequency, 
based on in-game events. Think “Doppler effect” realism. 

We will round out the tutorial by explaining how to create your own 
custom vibration events and timelines for using a free “Haptic Studio” 
tool from Immersion. We will show how these vibration effects can be 
integrated with standard Android animations of drawable resources. The 
tutorial will combine PowerPoint slides with Android code examples. We 
will work through some hands-on code exercises, so bring your laptop. 
All the source code and exercises will be downloadable to help you have 
a rich, successful and enjoyable learning experience. 

Level: Intermediate Topic Area: Developer Essentials 

Optimizing Your App for a Wide Range of Devices 
and Multiple Screens CI3IB wiwa 
Graham Holker 

During this half-day tutorial, we will take an example application that has 
been built for one device in portrait mode and extend it to support multi¬ 
ple screens and orientations. The example will be a list view containing a 
list of tweets with avatar images. This will be a hands-on tutorial with 
sample code. Bring your Android-ready laptop. We will cover strategies 
to support multiple screens, everything from 4-inch phones through 10- 
inch tablets. Topics include: 

• Using the simulator to quickly test layouts on different screen sizes 

• Strategies to reduce code duplication in your layouts using relative lay¬ 
outs and weighted layouts 


• Optimizing bitmaps that are in your app or from the network 

We will cover how to support multiple orientations and some of the 
problems we see in practice, including: 

• Android's life cycle with respect to orientation changes 

• Creating layouts for both orientations while minimizing code duplication 

• Issues that will appear once users start rotating your app 

• Testing your app for rotations 

• Memory leaks when rotating and how to uncover them 

Throughout the tutorial, we will also cover some common pitfalls and 
best practices for supporting a wide range of devices, along with other 
lessons learned from the trenches. 

Level: Intermediate Topic Area: Developer Essentials 

Pretty Mobile: Making Your 
Application Look Sexy whm 
Jason Mark 

If you ever find yourself making graphical decisions on your application, 
this session is for you. This hands-on tutorial will consist of critiques 
and walkthroughs of your applications with an eye to making them look 
amazing. We will open up Photoshop and hack up screens and try new 
things. We will look at best-practice applications and give some tips on 
how to get there. Our goal is to make sure that everyone leaves this 
tutorial with a list of design improvements that you can make to your 
own applications—and a list of other things to be done as well. We 
can’t make you a designer in one tutorial, but we can help you with that 
next step up. 

Level: Intermediate Topic Area: Developer Essentials 

Talk to Your Toaster: Developing Android 
Accessories, Part II CHIP wi»ia 
Dave Smith 

In this half-day tutorial, we will look in-depth at the APIs available in the 
Android framework to connect with external hardware, as well as the 
basics developers need to get up and running. You will learn how to work 
with the Android USB framework, including host mode and the Open 
Accessory protocol. We will also look at the embedded side of Open 
Accessory to gain an understanding of how to implement it on an embed¬ 
ded device. Although this tutorial is not directly hands-on, sample code 
for both the Android and firmware side will be provided. Experience and 
familiarity with embedded development platforms such as Arduino, or 
attending the previous tutorial (“Exploring Embedded with Arduino”), will 
be helpful as we will be exploring some accessory firmware. An under¬ 
standing of the basics of USB technology is also a plus. 

Level: Intermediate Topic Area: Developer Essentials 
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10:00 am - 11:15 am 

A Deep Dive into Renderscript flBHl mnn 

Larry Schiefer 

Due to Android’s use of Java as the primary development language and 
environment, many developers believe the only way to support high-per¬ 
formance mathematics for items such as highly computational 3D graph¬ 
ics is to develop most of their applications in native code (C/C++) using 
the Android NDK. Introduced in Android 3.x as a simplified way to boost 
the performance of mathematical calculations and 3D graphics opera¬ 
tions, Renderscript offers a compelling alternative without requiring the 
developer to deal with native code and JNI. 

In this class, we will cover what Renderscript is, then dive into typical 
use cases, pitfalls and debugging. The underlying details of the Render- 
script implementation will also be covered, so you gain an understanding 
of the technology. 

Additionally, we will cover Renderscript usage and an in-depth exami¬ 
nation of its capabilities and underpinnings. The class will include code 
samples to demonstrate the technology as well as reviewing the inter¬ 
nals. You should be familiar with Android development and the Android 
SDK tools. Previous knowledge of 3D graphics is not required. 

Level: Intermediate Topic Area: Developer Essentials 

Android Fundamentals: What I Wish I Knew 
When I Started! 

Chris Haseman 

This introductory class is for relative beginners—that is, 
W i yU i l i f experienced programmers who have little or no experience 
with Android. Before you attend this session, you will be expected to 
have already installed the SDK, done a “Hello world” tutorial, and have 
a basic knowledge of the building blocks of both Java and those that 
comprise Android: Activities, Intents, Services, Content Providers, 
Broadcast Receivers, Views and the Manifest. 

In this class, we'll present simple application development best prac¬ 
tices as well as design patterns to avoid. Here are a few we’ll cover: 

• Activities are not applications. This is important for several reasons, 
but it’s an oft-made beginner’s mistake 

• The Ul thread and when you should stay away from it 

• How to deal with many screen resolutions (Hint: NEVER use an 
AbsoluteLayout) 

• Critical differences between Android and other mobile platforms 

New to Android? This class will make you feel right at home. 

Level: Overview Topic Area: Developer Essentials 

Android Performance Tips mnn 

Godfrey Nolan 

Android application development, like every other client-side technology, 
can suffer from basic performance issues. This class looks at how to 
identify performance bottlenecks in your app using open-source and 
commercial load-testing tools during development. We’ll take a look at 
some classic examples of why your app is underperforming and what 
options you have to optimize your Java code, as well as when you 
should and should not move to the NDK. Finally, we’ll also look at how 
to use analytics to make sure your app remains fast and responsive 
after it’s released. 

Level: Advanced Topic Area: Developer Essentials 



“AnDevCon is a great way to get introduced and immersed 
in Android development.” 

—Zheila Ola, Senior Software Engineer, Kyocera 


BLE (Bluetooth Low Energy) Is Finally Here for 
Android! flHHl ww* 

Dario Laverde 

BLE in the past year has exploded. From the numerous kick-started 
startups to larger players taking advantage of lower-cost BLE 
hardware implementations. From health and fitness to home automation. 
From entertainment, sports and security to a seemingly constant stream 
of new innovative use cases. 

We’ll look at the BLE specification in detail, the GATT protocol, and 
the 30+ BLE profiles and services, from alert notification to transmission 
power and more. 

We’ll look at the history of the spec, but specifically focus on the his¬ 
tory of Android-supported devices and the chipsets they use (from 
Broadcom to Tl), and of course review the current list of BLE (“Smart 
Ready”)-enabled Android devices. 

We’ll focus on best compatibility practices when using the several 
APIs available to date in order to support many devices with your BLE 
Android applications. Since not all the devices will support the latest 
Android API, you’ll learn how to roll your own compatibility wrapper. And 
we’ll also look at debugging tools and techniques in a hands-on coding 
session. 

We’ll connect to actual BLE devices to be demoed during the session, 
such as wristwatches, heart-rate monitors, key fobs, and possibly even 
forks, eyeglasses, toys, stickers and more. BLE device-development kits 
will be reviewed with a walkthrough on developing your own BLE device. 

Yes, BLE has been available for some time for IOS developers, but 
the good news for Android developers is that you can write BLE apps 
right now for off-the-shelf BLE devices even if they currently claim only 
iOS support. 

Level: Intermediate Topic Area: Developer Essentials, Embedded Android 

Developer Tools Essentials, Part I Overview hmh 

Mike Wolfson 

Developing Android applications can be challenging. Luckily, there is a 
robust set of tools that helps simplify the process. This two-part class 
will present an overview of the tools currently available as part of the 
standard development environment. 

During the first part, we will describe the most important tools, show 
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how to configure them properly, and demonstrate their effective usage. 
We will spend some time discussing how to effectively integrate the 
tools into your workflow so you’ll be able to develop more productively. 
Throughout the class, we will highlight some important shortcuts that will 
make your development easier and more efficient. 

This class is appropriate for all levels of developer; it will cover the 
essential tools that Android developers use in their normal workflow. We 
will highlight the most important tools that you will use to create and 
develop applications. This class will also focus on the basic tools, includ¬ 
ing ADB, DDMS, the emulator, the Ul designer and the ADT plug-in 
tools. 

We will use an Eclipse-based project to demonstrate the important 
concepts, so it is recommended (but not essential) that you have the 
current Android tools installed on your machine to follow along. 

Level: Intermediate Topic Area: Developer Essentials 


Introduction to Android Animation nmn 

Jason Ostrander 

Over the past year, the quality of apps in the Android market has 
increased substantially. Developers are taking Android Ul seriously and 
producing beautiful apps every day. Animations can be a great way to 
add that extra level of polish that makes your app really stand out, 
while providing the implicit visual cues that make your app intuitive to 
navigate. 

Using detailed code examples, this class will show you how and 
when to implement animation in your own Android apps. In this class, 
you will learn: 

• The major animation APIs in Android, including Drawable animation, 
View animation and Property animation 

• How to create natural-looking animations using Interpolators 

• Shortcuts to animating your Ul using ViewPropertyAnimators, Anima- 
tionSets and layout animations 

• Performance tips, gotchas and best practices to ensure your anima¬ 
tions are tasteful and beautiful 

This class is intended for developers familiar with Java and the 
Android framework. You should understand the basics of Android views, 
how to create XML layouts, and the Activity life cycle. 

Level: Intermediate Topic Area: Developer Essentials 


11:30 am - 12:45 pm 

Battle-Tested Patterns in Android Concurrency ww 


Doug Stevenson 

J Make use of those extra cores in your new device! The 
W I SPH i l i f newest generation of Android devices contains multiple 
cores, which when used properly can boost the performance of your 
application and enable a buttery smooth user interface. 

However, threading and concurrency are never easy. There are many 
options for parallelization and backgrounding of the work that an app has 
to do, but which solution is appropriate for which circumstance? And what 
are the specific problems that can come up that are unique to Android? 

In this class, we’ll cover the upsides and downsides of plain Java 
threads, AsyncTasks, Loaders and Services. We'll discuss the situations 
where concurrency is necessary, and proven patterns that solve those 
problems. You will also take home working code samples that demon¬ 
strate these patterns. 

To get the most out of this class, you should be an experienced Android 
developer, and have a general understanding of Java and threading. 

Level: Advanced Topic Area: Developer Essentials 


Developer Tools Essentials, Part II Advanced wi»ra 

Mike Wolfson 

Android application development has many challenges. Applications 
get complicated fast, and it can be difficult to isolate performance 
issues or identify bugs. There are a variety of tools included in the 
standard Android developer toolkit that help identify issues quickly. 
Knowing how to use the tools effectively will help you produce better 
applications. 

During the second part of this two-part class, we will demonstrate 
the advanced developer tools. We will show how to configure them 
properly, demonstrate their effective usage, and suggest some key use 
cases where the tools are most effective. 

This class will highlight the advanced developer tools that will allow 
you to take your development to the next level. The class will focus on 
the tools used to identify performance or Ul issues. These include 
Traceview, Hierarchy Viewer, Lint, Monkeyrunner and others. 

We will use an Eclipse-based project to demonstrate the important 
concepts, so it is recommended (but not essential) that you have the 
current Android tools installed on your machine to follow along. 

Level: Advanced Topic Area: Developer Essentials 

Dive into Android Fragments wwh 

Donn Felker 

The compatibility library is currently very important to the Android 
ecosystem. With it, all apps targeting 1.6 and above can use features 
such as Fragments and loaders to build compelling Android applications. 

This session will cover Fragments from the introduction of what they 
are, and will conclude by covering advanced usages using the Fragment- 
Transaction and RoboGuice’s Event Manager (event bus) system to 
communicate between Fragments at runtime (allowing you to decouple 
your code using a more event-driven architecture). You will also be intro¬ 
duced to the some basic back-stack management in this session. 

Level: Intermediate Topic Area: Developer Essentials 

Enterprise Infrastructure, Tools and Tricks for Teams 
Developing Android Applications fll3n> mnn 
Manfred Moser 

Have you been developing Android applications for a while? On your 
own? And there is just too much to do? Congratulations! But what next? 
Android application development is growing up, and larger and larger 
teams are working on multiple mobile applications. And these applica¬ 
tions have to tie back into one or many server-side enterprise applica¬ 
tions. The complexity of a typical Android application requires the use of 
a number of external libraries for interoperating with Web services and 
other systems; abstracting the Android API across platform versions; 
improving the performance or maintainability of the source code; and 
many more aspects. Learn about a number of great libraries available as 
open source, where to get them, and how to start including them into 
your application easily. 

As a next step, we will learn about repository management. Learn 
how to enjoy great build performance and stability, and how to gain 
access to an easy mechanism to distribute your own libraries and com¬ 
ponents internally as well as to partners and clients. Once you are using 
a repository manager, you will be able to easily distribute your applica¬ 
tions across teams and potentially implement a multi-stage release 
process with notifications and rollbacks, if necessary. 

Using all these libraries brings tremendous benefits to you. It howev¬ 
er also means that you are responsible for license compliance, and we 
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will show you some accepted practices for ensuring that your applica¬ 
tions comply. Unfortunately, these components can be affected by secu 
rity issues as well. We will examine the ideas of Component Lifecycle 
Management, and check out some of the tools available to help you 
take control over potential security and license issues. 

Once your development efforts scale even further, you will need to 
examine your version-control system usage. We will look at a few prac¬ 
tices for using branches effectively and ensuring that development 
efforts on multiple features integrate well. Adding a continuous integra¬ 
tion server into your development infrastructure will allow you tie every¬ 
thing together. 

Level: Intermediate Topic Area: Developer Essentials 

Leveraging Android’s Linux Heritage whm 

Karim Yaghmour 

Although Android is built on top of Linux, it uses almost none of the 
components traditionally found in a standard Linux distribution or an 
embedded Linux system. Can “classic” Linux apps be made to run with 
or under or on Android? Can such apps be made to “talk” to Android 
components and vice-versa? Beyond getting the basic BusyBox, glibc 
and glibc-compiled apps running under Android, this talk will go over 
some tips and tricks for making classic Linux apps coexist and interact 
with the Android stack on the same Linux kernel. 

This presentation is for embedded developers wishing to understand 
how they can leverage “legacy Linux” and “embedded Linux” applica¬ 
tions and software components in an Android environment. It assumes 
familiarity with Linux and “embedded Linux.” To benefit fully from this 
presentation, you should also be familiar with the basics of Android’s 
internals or have attended the “Embedded Android” tutorial. 

Level: Intermediate Topic Area: Embedded Android 

Ul Functional Testing with uiautomator CHIP mum 

Mark Murphy 

Late 2012 brought us yet another Android testing framework from 
Google, called uiautomator. This framework is designed to help create 
functional (black box) tests, including device-level testing, from a JUnit- 
based test suite. This class will review the role of uiautomator, how to 
set up and run uiautomator tests, and how uiautomator compares to 
other Android testing frameworks. You should have basic knowledge of 
Android application development and JUnit. 

Level: Overview Topic Area: Developer Essentials 

2:30 pm - 3:45 pm 

Building Your First Social App Al^ni nmn 

Christine Abernathy and Bear Douglas 

In this class, you’ll get an introduction to Facebook’s APIs and SDK for 
Android. We’ll show you how to use Facebook Login to make signup 
simple: personalize user experience by fetching user data into your app; 
and let people share stories from your app with their friends. 

This intro class assumes no prior knowledge of developing with 
Facebook. We will provide sample code and walkthroughs. By the end, 
you will have built a simple social application. 

To build on information learned in this class, attend “Making Sticky 
Social Apps. ” 

Level: Intermediate Topic Area: Developer Essentials 



“AnDevCon is a great chance to meet some cool people 
and learn great tips!” 

—Ravi Agarwal, Professor of Computer Science , St. Norbert College 


Java and the Android Stack: 

A Security Perspective flHHl 

Pragati Ogal Rai 

As mobile devices become an integral part of an individual's daily life, 
security and privacy are of paramount importance. Mobile platforms like 
Motorola’s Linux Java, which was a derivative of Java, followed Java’s 
security model. With Android, the story is not the same. With its layered 
architecture, security in Android begins from the platform. Most of the 
development on Android is done using Java. So a natural question is, 
does Android follow Java’s security model? 

This class will discuss both Java and Android security models in 
detail. We will discuss Java’s sandbox model, JVM, security manager, 
access controller, class loaders, and language and application security. 
For Android, we will discuss the Android platform, Crypto APIs, and 
application-level security. We will then try to summarize and draw con¬ 
clusions on whether or not Android follows Java’s security model. You 
will walk away with in-depth knowledge of both the Java and Android 
security models, and will be aware of security artifacts in Android that 
you can use to develop secure applications. 

Level: Overview Topic Area: Developer Essentials 

Optimizing Android Ul: Tips for 

Creating Fast and Responsive Applications BiliB 

Jason Ostrander 

Building a successful Android application requires more than 
UiSlUlflilil just putting something in the market. If you want to delight 
your users, you have to create an app that smoothly animates and is 
responsive to the touch. Details matter. No one likes to use an app that 
stutters during scrolling and fails to respond to taps. 

In this class, you will learn practical techniques you can use to speed 
up the drawing of your Ul. With detailed code examples, you will learn: 

• Strategies for moving long-running operations off the Ul thread, includ¬ 
ing how to effectively use Handlers and Services 

• How to create smoothly scrolling lists by reusing views and imple¬ 
menting the ViewHolder pattern 

• Using ViewStubs, RelativeLayouts and GridLayouts to optimize the 
drawing of your Ul 
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• How you can use Loaders to keep your Ul updated with asynchronous 
changes in your database 

This class is intended for people already familiar with Java and the 
Android framework. You should understand the Activity life cycle and 
how data adapters work, and have a basic understanding of Android’s 
XML layout. 

Level: Intermediate Topic Area: Developer Essentials 

Patterns for Connected Apps, Part I OTI win* 

Mark Wickham 

Nearly every successful app today relies on connectivity to provide a 
compelling user experience. While third-party APIs and cloud services 
provide a very simple way to implement connectivity, there are times 
when you may want to implement your own connected features and 
retain complete control of your assets. This class will provide you with 
several useful basic patterns that can be used as building blocks to 
implement your own server-based features. 

What we’ll cover: 

• Working code examples and demos. Both the Android code and serv¬ 
er-side PHP will be presented. 

• Basic connectivity patterns will be presented, including an approach 
for determining Internet connectivity and displaying real-time status 
and server availability. A splash screen implementation will be covered, 
including background downloading of static content. 

Apps often rely on images of large size or quantity, which must be 
downloaded. This can easily lead to out-of-memory conditions. Lazy 
loading and caching examples for the ListView, GridView and Gallery 
widgets will be presented, which allow image-heavy apps to function 
well even when an Internet connection is not available. 

This class will also provide examples using HTTP get and post func¬ 
tions to implement dynamic spinners for centralized server-side data 
such as filename lists, as well as a server-based approach for accepting 
feedback and sending e-mails from within your app. Additionally, the 
class will provide ideas and examples, enabling you to implement your 
own connected features, several of which will be covered in the com¬ 
panion class, “Advanced Patterns for Connected Apps.” We will con¬ 
clude with a question-and-answer session. 

Level: Intermediate Topic Area: Developer Essentials 



Renderscript Rosetta Stone CI3in mnn 

Morrison Chang 

Renderscript is another tool in the developer’s toolbox, and the greatest 
challenge is knowing when to use it. On every Android device, there are 
a number of languages and frameworks, each of which provides a differ¬ 
ent level of support for creating performant code. Java is the lingua fran¬ 
ca of Androids powered by the Dalvik VM/JIT. The NDK gives you the 
near-metal abilities of C/C++. Renderscript is another framework geared 
toward making the most out of multicore devices, and it has its own 
pros and cons. 

This class will cover the various engines that are in everyone’s 
hands, and go through at least one example of the same algorithm 
implemented in various frameworks to see how they are put together. 
Performance and debugging comparisons between the various versions 
will be discussed. Familiarity with C and threads is useful for following 
the discussion, but direct experience in a non-Java language is not 
required. By the end, you should have a better understanding of trade¬ 
offs and issues while using Renderscript. 

Level: Advanced Topic Area: Developer Essentials 

Tips, Tricks and Secrets of the 
Android Multimedia APIs imm 
Doug Stevenson 

Some of the most compelling uses for Android devices involve rich 
media. In this class, you will learn to use the APIs that Android provides 
for audio and video, and how best to integrate them into your app. 

We will cover the MediaPlayer component, which plays audio and 
video streams at a high level. This is good for prerecorded content, but 
more advanced audio processing requires more control. For those 
needs, we will cover AudioTrack for audio playback and AudioRecord for 
recording. And for professional purposes, we will also briefly discuss the 
new media framework in Jelly Bean. You will leave with working code 
samples for each of the APIs discussed, including Jelly Bean’s Media- 
Codec for decoding raw audio. 

To get the most out of this class, you should have some Android 
development experience, and a basic understanding of how digital audio 
and video works. 

Level: Advanced Topic Area: Developer Essentials 

4:00 pm - 5:15 pm 

Advanced Patterns for Connected Apps, Part II 

■Siam wiiia 

Mark Wickham 

Nearly every successful app today relies on connectivity to provide a 
compelling user experience. While third-party APIs and cloud services 
provide a very simple way to implement connectivity, there are times 
when you may want to implement your own connected features and 
retain complete control of your assets. This class will provide you with 
several advanced patterns that can be used as building blocks to imple¬ 
ment your own sophisticated server-based features. 

The class will demonstrate working code examples. Both Android 
code and server-side PHP will be presented. It is recommended that you 
have a basic knowledge of HTTP and server-side programming. 

A centralized server-based voting and commenting system will be 
designed and implemented, which will allow users to rate content and 
share comments within your app. Although Android provides a simple 
RatingBar widget, a server-based approach is ultimately required to 
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allow your app to support networked voting and commenting. 

Displaying stylish in-app charts of dynamic datasets is not a trivial 
task. The class will review several approaches, including in-app libraries 
and server-side generation. A server-based solution will be presented 
that allows apps to display attractive charts generated from centralized 
server-side data. 

Writing and debugging server-side scripts can be time-consuming, espe¬ 
cially when you want to focus on your Android apps. A searchable stream¬ 
ing video platform will be presented that leverages open-source content- 
management system components and plug-ins to streamline development 
of a complex project. With basic connectivity patterns and a huge library of 
open-source server components, the possibilities for our Android apps are 
endless! We will conclude with a question-and-answer session. 

Level: Advanced Topic Area: Developer Essentials 

Agile Android Alim mnn 

Godfrey Nolan 

There’s no reason why agile practices and Android can’t go hand in 
hand. Learn how to add TDD (test driven-development, or unit tests) 
and BDD (behavior-driven development, or functional tests), as well as 
continuous integration environments, to your next Android project. Using 
Robolectric, Cucumber gems and a Jenkins server, this class will walk 
you through how to quickly get started with adding agile best practices 
to your Android projects. 

Level: Advanced Topic Area: Developer Essentials 

Android Application Security by Example mnn 

Pragati Ogal Rai 

This class is all about securing Android applications. Security is an inte¬ 
gral part of all applications, including gaming, social, commerce and 
local. We will cover the essentials of getting Android components, 
secure inter-component interaction, permissions, manifest file artifacts, 
and crypto APIs. We will also cover some emerging technologies and 
experiments on Android, like NFC and payments. All of this is done with 
plenty of code snippets that you can directly use in your apps. At the 
end of the class, you will walk away with an in-depth knowledge of 
Android application security, and examples of doing it right. 

Level: Intermediate Topic Area: Developer Essentials 

Android as the New Embedded Linux 

Karim Yaghmour 

Linux has been used in embedded systems for quite some time now. 
“Embedded” in fact represents a substantial part of Linux’s use. Yet, to 
this day, there’s no single definition of what “Embedded Linux” is. For all 
practical purposes, “Embedded Linux” remains a set of ad hoc recipes 
for building embedded systems based on the Linux kernel, each such 
system requiring a separate API spec and license vetting. 

Android on the other hand is a shrink-wrapped embedded Linux dis- 
tro that has a stable, consistent API, a growing developer community, 
and OEM-friendly licensing. Will these benefits make Android the default 
building block for Linux-based embedded systems? If so, what does that 
mean for the wider embedded world in general? 

We will look at the history, architecture and drivers behind each, and 
discuss what the future likely holds. 

Level: Intermediate Topic Area: Embedded Android 



“AnDevCon is the place where you meet interesting 
people, get help with your problems, and find new ideas.” 

—Aleksandr Ivanov, Senior Software Engineer, Yota Lab 


Building an Efficient Background Sync Engine wnw 

Chris Haseman 

It’s a problem felt by nearly all mobile software developers: How do you get 
data from a remote source into your application without making users wait, 
filling up their hard drives, or destroying their batteries? In this class, you 
will be shown how to build your own persistent data cache so that your 
users can have fast, clean and efficient data instantly at their fingertips. 

We will also discuss Sync Adapters, Content Providers, and net¬ 
working tricks for efficiently and quietly moving data into—and out of— 
your mobile applications. 

Level: Intermediate Topic Area: Developer Essentials 

Making Sticky Social Apps BBin wwa 

Christine Abernathy and Bear Douglas 

Good social apps keep users engaged and interacting with their friends. 
This class will build on “Building Your First Social App” to show you 
how you can create apps that keep users coming back—and sharing 
with their friends. We’ll introduce you to Open Graph, and show you 
how to create compelling stories that will drive traffic to your app. This 
class will also briefly cover ads and promotion on Facebook. 

This class assumes some knowledge of Facebook’s APIs. We will 
provide sample code and walk through a simple Timeline app. 

Level: Intermediate Topic Area: Developer Essentials 

Thursday, May 30 
8:30 am - 9:45 am 

Android OpenGL ES Essentials, Part I and II wwia 

Robert Green 

Ready to make some hardware-accelerated triangles? This two-part, 

150-minute class will start with the basics and work up to some high- 
class code snippets that will get your graphics flying. This “OpenGL 
101 ” class still requires a basic understanding of Android development, 
but even a seasoned graphics programmer may still learn a thing or two. 
Level: Intermediate Topic Area: Developer Essentials 
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Creating More with Less wwm 

Donn Felker 

Building an Android application of any worth is no trivial task. From inte¬ 
grating with remote APIs to making sure that the Ul and UX are set up 
properly takes a lot of time, and more so, a ton of code to do. In this 
session, learn how to stand on the shoulders of giants to create com¬ 
pelling applications with minimal code that will operate and look great on 
Android 2.x up to the current version of Android. 

You will be introduced to some open-source libraries such as 
RoboGuice, ActionBarSherlock, GSON, HTTP Request, Maven and 
more. At the end of this session, you should be able to download a tem¬ 
plate application and begin working on your next masterpiece. 

Level: Intermediate Topic Area: Developer Essentials 

Effective Android HTTP, Part I and II flI3n) idmia 

Jesse Wilson 

This two-part, 150-minute class provides an overview of three Android 
HTTP clients: HttpURLConnection, Apache HTTP Client, and OkHttp. 
You will learn the relative merits of each, and then dive into a full set of 
problems and solutions that most apps need to handle. 

We’ll start small, making a basic HTTP request from an Android app. 
Next, we’ll learn how to monitor that HTTP request using Charles, an 
HTTP debugging proxy. Once we’ve seen all the moving parts in place, 
we’ll unit-test our HTTP code with MockWebServer. 

Once the groundwork is in place, we’ll walk through typical problems 
and their solutions. We’ll upload resources (without exhausting memo¬ 
ry), configure a cache (and the corresponding server), compress con¬ 
tent, harden SSL, and discuss authentication. We’ll provide concrete 
examples of how to map REST APIs to Java interfaces using Retrofit. 
And we’ll provide best practices and an example for downloading 
resources in the background. 

Attend this class to see that the HTTP protocol is very flexible, and 
how to make it work in your applications while conserving bandwidth 
and battery. 

Level: Advanced Topic Area: Developer Essentials 

Creating ePub Books for Android wim 

Jason Mark 

Thinking of writing or creating an eBook? Come to this class to learn 
what ePub is (Hint: It’s a limited subset of XHTML), and how Android 
handhelds and tablets are different from the Kindle. We’ll talk about limi¬ 
tations to the format and what types of material lend themselves to 
ePub. We’ll also leave a chunk of time to discuss specific challenges 
(technical or conceptual) with your eBooks, so bring your questions. 
Participants will leave this session with a good understanding of what 
tools are available for creating ePubs, when not to use ePub, and how 
to submit your ePub book for sale via various channels. 

Level: Intermediate Topic Area: Developer Essentials 

Hacking APKs for Fun and Profit (Mostly for Fun), 

Part I and II Wiira 

David Teitelbaum 

Dive deep into the internals of Android in this two-part, 150- 
\353E52SI minute class. You will explore the wonders of Dalvik byte¬ 
code, smali syntax, decompilation tools, patching techniques, and com¬ 
mon methods you can use to (try to) protect your apps. 

Extremely hands-on, you’ll be downloading a very popular app, modi¬ 
fying it, and messing around with its behavior. Even if you're not that 


interested in APK hacking, you’ll leave this class with the sort of deep 
appreciation for Dalvik that makes good Android developers great. 

Level: Advanced Topic Area: Developer Essentials 

Inside Android’s User Interface wwn 

Karim Yaghmour 

Android is a very complex stack, comprised of several dozen novel com¬ 
ponents and moving parts. Still, it’s intrinsically a user-centric system 
and, therefore, the parts that deal with the user interface are of special 
interest to anyone aiming to put Android in a device. This class will 
examine the internals of Android’s user-facing components. Specifically, 
we will cover the inner workings and interactions of the Window Manag¬ 
er, Surface Flinger, Input Method Manager, and the rest of the system. 
We will also cover key display and input components such as the Status 
Bar, Soft Keyboard and Notifications. 

This class will be especially useful to developers intending to use 
Android in user-facing embedded systems; those needing to implement 
support for their graphics hardware; and anyone interested in the inter¬ 
nals of Android’s graphics and input layers. 

Level: Advanced Topic Area: Embedded Android 

Mastering the Android Touch System mm 

Dave Smith 

This class provides an in-depth look at the Android touch input system. 
We will examine the inner workings of how Android handles touch 
events within a view hierarchy. This will include how Android passes 
touch events between Views, Activities and the Window, as well as 
opportunities developers have to interact with and modify this chain. 

We will then take a look at the affordances provided by the system to 
handle a variety of standard single- and multi-touch events and gestures, 
as well as advanced techniques for creating truly custom touch handling. 

You should have a strong basic knowledge of working with Android 
views. Knowledge of the basic click handlers in the view framework is 
assumed. Sample code will be available ahead of time for those who 
would like to follow along with the examples. 

Level: Advanced Topic Area: Developer Essentials 

11:30 am - 12:45 pm 

Android OpenGL ES Essentials, Part I and II mm 
Robert Green 

Ready to make some hardware-accelerated triangles? This two-part, 

150-minute class will start with the basics and work up to some high- 
class code snippets that will get your graphics flying. This “OpenGL 
101 ” class still requires a basic understanding of Android development, 
but even a seasoned graphics programmer may still learn a thing or two. 
Level: Intermediate Topic Area: Developer Essentials 

Bringing up Android on Your Favorite x86 
Workstation or Virtual Machine, Part I whim 
Ron Munitz 

This class introduces the concepts of AOSP and how to use it in order to 
configure and build one of the most popular Android devices available: 

The Android emulator for an x86 target. You will then learn a reincarna¬ 
tion of the AOSR intended to bring Android to as many x86 devices as 
possible. You will see its structure and compare it with the AOSR and 
demonstrate how such a build works within Virtual Box, QEMU and more. 
Level: Intermediate Topic Area: Embedded Android 
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Exploring Android SDK Add-ons for Devices Wl nmn 

Larry Schiefer 

Android SDK add-ons provide a simple mechanism for allowing a device 
to expose additional functionality not included in the standard Android 
APIs. This functionality allows OEMS as well as third-party developers to 
create applications that include value-added features for specific targets. 
At the same time, an SDK add-on provides OEMs a way to extend the 
platform without breaking Android compliance. 

This class will cover how to install and use SDK add-ons to extend 
the functionality of applications using a real-world sample. Additionally, a 
new sample SDK add-on will be created as the class explores how an 
SDK add-on is created, what one can do, security concerns, and how to 
package and deploy an SDK add-on for a new device. 

This class will be a lecture/discussion about Android SDK add-ons, 
giving examples and showing how applications can leverage a vendor’s 
add-on, as well as how an OEM team can create a new add-on for a 
device. The class will include some code to demonstrate the concepts 
and behaviors. You should be familiar with Android development and the 
Android SDK tools. 

Level: Advanced Topic Area: Android Tablets and Beyond 

Effective Android HTTP, Part I and II Wl mnn 

Jesse Wilson 

This two-part, 150-minute class provides an overview of three Android 
HTTP clients: HttpURLConnection, Apache HTTP Client, and OkHttp. 

You will learn the relative merits of each, and then dive into a full set of 
problems and solutions that most apps need to handle. 

We’ll start small, making a basic HTTP request from an Android app. 
Next, we’ll learn how to monitor that HTTP request using Charles, an 
HTTP debugging proxy. Once we’ve seen all the moving parts in place, 
we’ll unit-test our HTTP code with MockWebServer. 

Once the groundwork is in place, we’ll walk through typical problems 
and their solutions. We’ll upload resources (without exhausting memo¬ 
ry), configure a cache (and the corresponding server), compress con¬ 
tent, harden SSL, and discuss authentication. We’ll provide concrete 
examples of how to map REST APIs to Java interfaces using Retrofit. 
And we’ll provide best practices and an example for downloading 
resources in the background. 

Attend this class to see that the HTTP protocol is very flexible, and 
how to make it work in your applications while conserving bandwidth 
and battery. 

Level: Advanced Topic Area: Developer Essentials 

Hacking APKs for Fun and Profit (Mostly for Fun), 

Part I and II fliliia 

David Teitelbaum 

fQTjgaft Dive deep into the internals of Android in this two-part, 150- 
minute class. You will explore the wonders of Dalvik byte¬ 
code, smali syntax, decompilation tools, patching techniques, and com¬ 
mon methods you can use to (try to) protect your apps. 

Extremely hands-on, you’ll be downloading a very popular app, modi¬ 
fying it, and messing around with its behavior. Even if you’re not that 
interested in APK hacking, you’ll leave this class with the sort of deep 
appreciation for Dalvik that makes good Android developers great. 

Level: Advanced Topic Area: Developer Essentials 



“This is the MOST important Android event in the world, 
and everyone should definitely attend it. I came all the 
way from Romania and I am not sorry at all!” 

—Anda Nicola, Senior Android Developer, SoftVision 


Targeting App Success, Part I 

Nathan Mellor 

lalEn Writing apps for fun is fine, but making them more profitable 
IWlM JS ilii has been known to increase the fun. If you have an app avail¬ 
able in Google Play Store or elsewhere, you are marketing a product. 
Understanding some of the principles of marketing will make a differ¬ 
ence on the amount of money you can bring in. 

If you are a software developer and don’t want to spend a year 
studying Internet marketing, come and see how the principles of Internet 
marketing apply to promoting your apps in ways that even software 
engineers can understand (there will be math). Topics will include busi¬ 
ness models for apps, marketing funnels, keyword research, and other 
key marketing concepts. Actual examples will be shown. 

We will take an app idea from the target audience through research 
and refinement, app discovery, and installation. Increase your app’s 
reach, its rating, and its number of installs through some simple and 
some more complex steps. 

Note: The presenter was formerly employed as a software developer, 
but has since formed his own business with an app at the top of its cat¬ 
egory. Insights are from his own personal experiences and from Internet¬ 
marketing courses. 

Level: Intermediate Topic Area: Android Business 

1:45 pm - 3:00 pm 

Android Platform Security Underpinnings fligin wmn 

Marko Gargenta 

Android security is quite multifaceted, and not surprisingly given the depth 
and complexity of the Android OS. In this class, you will learn what makes 
up the various layers of security and how they work together. By the end, 
you’ll have a solid understanding of various security concerns from the low- 
level kernel to the high-level app permissions, and everything in between. 
This class will focus on the entire platform, not just the apps layer. 

We’ll start with the Android architecture from the security perspec¬ 
tive, followed by the startup and boot process of a typical device. Once 
you understand that, we’ll deep-dive into Android security architecture, 
app signing, user IDs, file access, multi-user support and permissions. 
Next, we’ll provide an overview of file-system encryption, rooting, and 
memory security. Finally, we’ll touch on device policy administration, mal¬ 
ware, SE Android, and some other vectors of attack. 

This class assumes basic understanding of operating systems and is 
based on the Jelly Bean multi-user version of Android OS. 

Level: Advanced Topic Area: Developer Essentials 
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Bringing up Android on Your Favorite x86 
Workstation or Virtual Machine, Part II wim 
Ron Munitz 

This class is a more comprehensive tutorial on how to configure and build 
an Android desktop machine. You will be shown a recipe for building and 
testing our Android build on various Virtual Machine configurations, which 
will address both the Android framework and the Linux kernel. 

The class will suggest at least two comprehensive use cases of build¬ 
ing for Virtual Box, and for building a full working laptop (including Ether¬ 
net, camera, Bluetooth, WiFi, sound and graphics acceleration), proving 
that an Android system can be a nice replacement for any desktop. 

You will enjoy a fascinating journey bringing Android from the Embed¬ 
ded Linux world back into a desktop solution. We will address topics 
such as integrating with Google Apps, handling “Google Play” filters, 
setting the best-fit resolution, and debugging the platform and applica¬ 
tions with the conventional Android and Linux tools. 

Level: Advanced Topic Area: Embedded Android 

Building NFC-Enabled Android Applications mum 

Jason Weiss 

Android’s support for Near Field Communications (NFC) offers devel¬ 
opers a powerful new metaphor for mobile phone interaction: Physical 
Touch. NFC supports far more than secure financial transactions. Popu¬ 
lar games like Angry Birds Magic have already incorporated NFC (you 
have to touch your phone to another NFC-enabled phone to unlock 
game levels) to expand the social interaction of mobile gaming, and a 
new breed of enterprise applications that tout proof of presence for 
remote workers already exists. Industry research has demonstrated 
that NFC provides a more efficient and friendlier user experience than 
0R codes. 

This advanced class covers the nuts and bolts of NFC development 
on the Android platform. You will learn the basics of NFC, including the 
types of RFID tags that the technology supports, as well as a primer on 
security concerns and tag-storage limitations. Code examples will be 
provided to demonstrate how programmers can leverage the NFC Data 
Exchange Format open standard inside their applications for 
reading/writing data to/from RFID tags. You will also be introduced to 
the NFC Tag Event open standard for back-office integration. 

You are not required to have an NFC-enabled phone, but are strongly 
encouraged to attend with an NFC-enabled handset, such as the Google 



Nexus S (30, HTC Amaze (40, or Samsung Galaxy Nexus (40, since 
the Android emulator does not support NFC emulation. 

Level: Advanced Topic Area: Developer Essentials 

Connecting the Dots: Bluetooth in Your Application 
CHS) wsira 

Dave Smith 

This class provides a look at the basics of how Bluetooth technology 
works and the different modes through which an external device can 
communicate with an Android handset or tablet. We will explore how 
devices pair, connect and communicate within the context of the 
Android framework. You will also gain an understanding of how Blue¬ 
tooth devices advertise their capabilities using discoverable services. 

We will work through example applications using the framework APIs 
to do simple serial communication over the RFCOMM protocol, and 
integrate with higher-level devices like headsets using Profiles. 

You should have an understanding of basic framework concepts like 
Intents and BroadcastReceivers. Sample code will be available ahead of 
time for those who would like to follow along with the examples. 

Level: Intermediate Topic Area: Developer Essentials 

Effectively Leveraging Open Source fll9H1 whim 
Jake Wharton 

Application development is becoming an increasingly complex process. 
Providing the latest widgets and Ul patterns, dependency injection and 
state management, interacting with RESTful APIs, and choosing the right 
combination of helper classes is a full-time job—and we haven’t even 
begun to get to the content and styling of your app. Thankfully, the 
open-source community has been providing and supporting libraries, 
which make all of these tasks easier. 

This class will cover eight libraries through which you can measurably 
increase the quality of your application and improve the end-user experi¬ 
ence. We will start with a quick overview of each library, including their 
use cases and brief code examples. After we have been introduced to 
each library, we’ll dive deep into two examples of how combining these 
together can greatly simplify your application. The first example will cov¬ 
er the complexities of network request and response dispatching, and 
how to separate its logic away from your Ul. The second example will 
build on the first in order to leverage proper testing techniques on the 
desktop and on the device for an end-to-end tested solution. 

At the end of the class, you will leave with strong application pat¬ 
terns built on open source, which will speed up development time and 
improve overall quality. 

Level: Advanced Topic Area: Developer Essentials 

Incorporating Touch Feedback in Your Apps to 

Improve UX mwm 

Bob Heubel and Peter van der Linden 

In an ocean of apps, how do you differentiate yours? Cool graphics and 
sounds are now commonplace and no longer leave the same impression 
on gamers and avid mobile users. 

With touch-screens as the Ul of choice in mobile devices, haptic feed¬ 
back has started to get more attention in recent years, but it is still one 
of the most overlooked yet valuable aspects of the mobile experience, 
especially in games. Come to this class to learn how to implement con¬ 
sole-like gaming effects to get your games and other apps noticed for 
increased revenue possibilities with handset manufacturers and carriers. 
This class will teach you the same methods Sega, Rockstar Games 
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and Handy Games use to maximize the Android vibrate function using 
the free Immersion SDK, from simple Uls to more complex gaming use- 
case scenarios. You will learn how to implement these vibration feed¬ 
back effects into your own games, as well as learn core vibration design 
principles to follow when implementing gaming effects. A simple sample 
application will be used in Eclipse as a tutorial for the class; files will be 
provided. A PowerPoint presentation and hands-on hardware demon¬ 
stration of good touch design will also be provided. 

Level: Intermediate Topic Area: Developer Essentials 

Targeting App Success, Part II flBIP 

Nathan Mellor 

Are you eager to build a sustainable business based on Android apps? 
Learn how to maximize your chances of success without inviting too much 
stress. Learn specific things you can do to improve your app business and 
accomplish the tasks outside of coding. The focus is on tools and tech¬ 
niques that will work for a small business or individual, even if you are just 
one person working out of your home office, like the presenter. 

We will talk about how to truly measure profit and how it can make a 
difference in how you make decisions. Also, learn how to find help and 
tools affordably as a small business. 

We will continue our journey through the app-marketing funnel to 
track success metrics after the install, including where analytics, conver¬ 
sions, usability, and communications with customers come into play. We 
will then talk about specific ways to expand your reach outside the mar¬ 
ket with organic and/or paid promotion, and how to track the return on 
investment. 

Level: Advanced Topic Area: Android Business 

Friday, May 31 
8:30 am - 9:45 am 

Designing for Android 

Chris Huban and Vijay Penemetsa 

Designing for Android is equal parts technical as it is pure design. Terms 
and abbreviations like resolution, density and XHDPI may as well be for¬ 
eign languages to non-technical people. Developing for Android suc¬ 
cessfully requires collaboration between a developer and designer. 

Good design can mean the difference between success and failure, 
and it goes beyond looking pretty. The way that a user interacts with 
your app can determine how much they’ll use it, if they’ll recommend it, 
and if you’ll make money. That said, there are standard ways of doing 
things in Android. Successful designs are the designs that are balanced 
and don’t go too far. A pretty design is just that until it’s built. 

It behooves the design and development process when both par¬ 
ties—designers and developers alike—understand and help guide each 
other when creating and developing for mobile. Developers don’t need 
to be thinking like designers; designers should start thinking more like 
developers. 

Design isn’t just about making something look or feel pretty. In actu¬ 
ality, it’s ultimately about solving a problem. It’s not about colors or 
fonts, it's about function. And form should follow function, particularly 
when designing for mobile. 

This class will focus on the ways that developers and designers col¬ 
laborate, the key bits of information that developers often assume peo¬ 
ple know, and common workflow best practices that ensure the job gets 
done right the first time. We’ll also talk about clients and their expecta¬ 
tions from both sides of the fence, and why it’s important to be seen as 


working as a cohesive team. 

Note: The instructors work at Huge, a digital agency that provides 
business strategy, design, marketing and technology services. 

Level: Overview Topic Area: Developer Essentials 

Introduction to Continuous Integration Server Usage 
Focusing on Android Development CBW wnn 
Manfred Moser 

Never heard of Continuous Integration Servers like Hudson, Jenkins, 
CruiseControl or Bamboo? Already using one? Great. You will learn 
what Cl servers are out there for you to use and how easy it is to start 
using them. We will look at available services as well as how to run your 
own Cl server cluster locally or in the cloud. 

With a Cl server, you essentially get another team member on your 
development team who never stops working. We will demo how to set 
up a new instance of a Cl server on a machine and configure it for your 
usage. Learn how easy it is to build your application, whether you are 
using Ant, Gradle or Maven. We will explore what sort of scheduling 
options are typically available to run your builds, and how it all integrates 
with your version-control system. Once we have a build running, we will 
add some other projects to the mix and build up a full pipeline of builds. 

Adding executions of unit test runs into the mix will make it more 
interesting. Really cool things start happening when you add devices 
and emulators and run Android instrumentation tests. And maybe you 
will want to take screenshots automatically, or capture logs and test 
results for each build. 

With all this happening, we will tie it back to your team by looking at 
notification options and further automations for release and distribution 
of your application. During the whole class, we will ensure that you learn 
many of the best practices of Cl server usage in general and specifically 
related to Android application development, and walk away with a firm 
conviction to add a Cl server to your team. 

Level: Intermediate Topic Area: Developer Essentials 

Maps v2... and You! nmn 

Mark Murphy 

Late 2012 brought Android developers a replacement for the venerable 
Maps SDK add-on, known as the Maps v2 library. Maps v2 offers many 
improvements, such as vector-based maps with a look closer to that of 
the regular Maps application, plus the ability to embed maps in frag¬ 
ments. However, Maps v2 has a different API than the old MapView, 
and it has its fair share of issues as well. This class will show how to 
integrate Maps v2 in your app, how to accomplish the same sorts of 
things you did with the old MapView, and how to work around various 
Maps v2 issues. You should have experience with building Android Uls, 
including the use of fragments. 

Level: Intermediate Topic Area: Developer Essentials 

Getting Mobile with Android and Windows Azure 
Mobile fligni nmn 
Chris Risner 

Android is fast becoming the No. 1 mobile OS for development. If you 
want to build Android apps, you NEED to know about using the cloud. In 
this class, we’ll talk about connecting Android apps to Windows Azure 
Mobile Services to take advantage of easy data storage, authentication, 
push notifications and more. You’ll leave knowing how to get an easy-to- 
use back end up and running, and how to focus on building a great app. 
Level: Intermediate Topic Area: Developer Essentials 
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Save the Battery! App Design and Testing for Better 
Power Consumption i»im 
Moe Tanabian 

Power consumption is a very important and vital part of a successful 
Android device and application launch. If the iPad and iPhone are any 
indicators, good battery life is an essential part of a successful device 
and mobile application launch. Many operators and OEMs now pay 
attention to the application’s power usage profile as a measure of 
acceptability of the app. 

This class will focus on how to design and test Android applications 
to be more power-efficient and prolong battery life. We’ll cover: 

• An overview of batteries that are used in Android devices, their chem¬ 
istry, charge and discharge behavior 

• How to objectively measure power consumption in different application 
and usage scenarios in Android devices 

• Areas that an application developer and/or a device designer can 
effectively control to optimize power consumption, including screen 
usage, Ul design, network services usage, and input device usage 

• Setting up a power profiling and power consumption lab that doesn’t 
break your bank account 

Level: Advanced Topic Area: Developer Essentials 

The Fragment Transition, Part I and II iwum 

Corey Leigh Latislaw 

Android is evolving, but developers aren’t keeping pace. 

Fragments, which let you break your Ul into smaller functional 
pieces, were released two years ago. Fragments enable scaling of your 
app to tablets and the next generation of devices. There’s a huge oppor¬ 
tunity to lead the market, yet few businesses and developers are leading 
the charge. 

This two-part class is perfect for developers who already have an 
Android app in the market and who want to make the switch to using 
fragments. You will learn to take an existing activity-based application 
and convert it to use fragments. We will cover techniques for starting a 
fresh project, renovating an existing Android codebase, optimizing for 
tablets, and balancing the use of new APIs while maintaining backward 
compatibility. The best part is that you can start using fragments now 
without throwing out all your code! 

Level: Advanced Topic Area: Android Tablets and Beyond, 

Developer Essentials 

10:00 am - 11:15 am 

Building HTML5 Apps for Phone or Tablet kmm 

Joe Stagner 

HTML5 is truly a cross-platform development platform with its new func¬ 
tionality that can be used to build applications that run when a user is or 
isn’t online. Doing so, however, requires a change in your design thought 
process. In this session, we’ll not only discuss the new technologies, but 
also review patterns that will let you write one application to run on devices 
of different form factors, with or without an active Internet connection. 

Level: Intermediate Topic Area: Developer Essentials 

Protecting Your Android Source Code rania 

Godfrey Nolan 

Due to the design of the Java Virtual Machine (JVM), it is relatively triv¬ 
ial to reverse-engineer Java code from Java JAR and class files. While 
this hasn’t been an issue in the past (since most Java files are hidden 



“AnDevCon consistently proves itself as the go-to event for 
anyone involved in the Android ecosystem. The informa¬ 
tion presented, plus the opportunities provided to meet 
other professionals, are top notch. The food is also great!” 

—Steve Trelease, Software Developer, Independent 


on the server), it is an issue on Android phones where the client-side 
Android APK files are easily obtained and just as easy to decompile 
back into source. 

Come to this class to learn how and why this is possible by unravel¬ 
ing the APK into DEX files and the tools that are currently available to 
decompile your APKs back into Java or JavaScript source code with the 
click of a mouse. We’ll show some of the security issues that this rais¬ 
es, such as inadvertently allowing people to gain access to credit card 
information or back-end systems when someone has complete access 
to your source. We’ll also look at open-source, and commercial obfusca¬ 
tion tools and other techniques you should be using, such as C++ cod¬ 
ing, Google encryption and watermarking, to stop people from gaining 
access to your Android code. 

While we don’t expect any previous knowledge of decompilation or 
obfuscation techniques before the session, we can promise that at the 
end of the session, you will be armed with enough information to safe¬ 
guard your intellectual property from what is a very significant but little- 
understood issue. 

Level: Advanced Topic Area: Developer Essentials 

Little RASCAL 0.07—A License to Learn flBHI whim 
Gerry Schenk 

RASCAL is an acronym that stands for Remote Access Self Contained 
Android Learner. It is the working title of an automated device that stu¬ 
dents with short- and long-term disabilities may use to attend classes or 
other events. It is fully mobile and able to move from classroom to 
classroom. It allows the student a better long-distance learning experi¬ 
ence than teleconferencing or Skyping. The student will be able to fully 
interact with their classmates and instructors. 

Little RASCAL “walks” on four wheels that are driven by an Arduino 
processor (with a WiFi dongle). The processor is remotely controlled by 
an Android device. The Android device (cell phone or tablet) “finds” the 
RASCAL on the remote network and controls it via a client app on the 
Android device. The controller interface uses either the touch-screen. 
The RASCAL’s “face” is an Android tablet, complete with a webcam, 
microphone and speaker. The tablet will display the live image of the 
user and allow him or her to interact in real time with anyone that cross¬ 
es its path. The RASCAL has 360-degree mobility and is therefore not 
limited to a straight-ahead view while stationary. It is powered by a 
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rechargeable lithium “bicycle-type” battery. 

This class will include a demonstration of the Little RASCAL, a review 
of the electronics and mechanics, and a line-by-line review of the Arduino 
and Android code required for the RASCAL and remote user's devices. 

Note: The instructor is developing the Little RASCAL on his own 
time. He is not trying to market this concept or find investors. His hope 
is to share this idea and the simple technology behind it. 

Level: Intermediate Topic Area: Embedded Android 

The Fragment Transition, Part I and II fligin nmn 

Corey Leigh Latislaw 

Android is evolving, but developers aren’t keeping pace. 

Fragments, which let you break your Ul into smaller functional 
pieces, were released two years ago. Fragments enable scaling of your 
app to tablets and the next generation of devices. There’s a huge oppor¬ 
tunity to lead the market, yet few businesses and developers are leading 
the charge. 

This two-part class is perfect for developers who already have an 
Android app in the market and who want to make the switch to using 
fragments. You will learn to take an existing activity-based application 
and convert it to use fragments. We will cover techniques for starting a 
fresh project, renovating an existing Android codebase, optimizing for 
tablets, and balancing the use of new APIs while maintaining backward 
compatibility. The best part is that you can start using fragments now 
without throwing out all your code! 

Level: Advanced Topic Area: Android Tablets and Beyond, 

Developer Essentials 

Tracking User Behavior Creatively 

Kiana Tennyson 

Tracking user behavior is an indispensable means of behavior analysis 
that can play a tremendous role in shaping the future of a company’s 
product. It can mean the difference between delivering a standout appli¬ 
cation users adore, or a confusing, complicated mess that people don’t 
want to use. It is a powerful tool that can provide invaluable feedback to 
a company, delight the user with “Easter eggs” and surprises, provide an 
extra layer of security, or even scare the user if employed thoughtlessly. 

This hands-on class will explore creative strategies and best practices 
for tracking user behavior in an Android application. In addition to introduc¬ 
ing session attendees to Google Analytics for mobile Web applications, 
we will discuss tips and techniques for building custom and granular track¬ 
ing features. You will complete the class with a better understanding of 
user-behavior analysis, how to deploy user-tracking features in their 
Android application, and what resources are available to them. 

NOTE: It is highly recommended (but not required) that you bring a 
laptop with the SDK and IDE installed. Ideally, at the end of the class, 
you will be able use a simple Android application, and the results of the 
tracking features (as a group and down to individual users) will be pro¬ 
jected. The simple Android application will be available to users as a 
template before and after the conference. 

Level: Intermediate Topic Area: Developer Essentials 

You Want to Build the Next Instragram? tPH ihhm 
Moe Tanabian 

This class will focus on building a market-ready mobile service, including 
the client-side (mobile app) and the service-side rapidly, leveraging exist¬ 
ing cloud-computing platforms. In particular, we will discuss: 

• The general architecture of a mobile service 


• Designing and building the client (mobile app) 

• Challenges of building a market-ready mobile app 

- Usability and user experience - Performance and fluidity 

- Security - App maintenance and updates 

- Understanding user behavior, and measurability of the app 

• Designing and building the service 

• Challenges of building a market-ready mobile service 

- Availability (scalability, reliability, performance) 

- Security - Configurability 

• Time to market 

• Leveraging cloud-computing platforms to achieve fast TTM 

- AWS case study 

Level: Advanced Topic Area: Developer Essentials 

Automated App Builds Made Easy Wl mum 

Geoff Matrangola 

Android developers have had access to robust source control, IDEs and 
automated testing. It’s time they were able to scale that last hurdle of an 
automated build. 

Continuous Integration and other software engineering best practices 
demand an automated build process. However, many Android app devel¬ 
opers find it difficult to create an automated build process. Out of the 
box, the Android development environment makes light work of building 
your app in the Eclipse Interactive Development Environment. However, 
anything approaching a modern app with libraries and other components 
demands a more robust build process. Developers could spend a lot of 
time learning these tools on their own. Also, these tools have evolved in 
the ADT, and many of the how-tos out on the Internet are outdated, 
causing more confusion, frustration and time-wasting. 

Imagine always having a build ready to go into testing with your 
team’s latest commits. This makes nightly builds a dream. Testers don't 
have to have ADB set up with drivers for all the various devices they are 
testing with; they can simply download the latest APK. 

Do you have a complex build set up with various third-party libraries, 
your own libs, and pro and free versions? Do you need code pulled in from 
some sort of code-generation step? Do you have one person on your team 
who is responsible for doing the build, and do you live in fear that there will 
be some minor configuration change, costing you hours of productive time? 

In this class, you will see a complex configuration with several 
libraries producing multiple artifacts of an actual app on the Google Play 
Store. This will show developers how to use the built-in tools of the 
ADK, ANT and Jenkins, as well as how to write some custom scripts so 
that they can have a professional automated build system. 

Level: Advanced Topic Area: Developer Essentials 

2:00 pm - 3:15 pm 

Advanced Techniques for Developing Powerful, 

Yet Lightweight Android SDKs mum 

Marc Richards 

The Android app ecosystem is exploding. Developers need better tools 
now more than ever, and the number of third-party SDKs is also growing 
to meet the developer’s needs. Unfortunately, many of these SDKs are 
poorly developed and extremely difficult to use. 

In this class, you will learn best practices and advanced techniques 
for developing an SDK for Android. We’ll explore how to design and 
build an SDK for stability, testability, overall footprint size, and, most 
importantly, exceptional ease of implementation. During the class, we’ll 
develop a simple but well-architected SDK, and uncover and explain 
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many of the challenges you may encounter. 

Topics include device-feature detection, support for multiple applica¬ 
tion types (from Widgets to Services to Foreground GUI applications), 
API design, privacy of end-user information, and coding patterns to sup¬ 
port developer customization. We’ll conclude with advanced topics from 
lesser-known but very useful tricks to minimizing impact on application 
start-up time, to reducing memory footprint and persistent CPU use. 
Level: Advanced Topic Area: Developer Essentials 

Beautiful Android on a Shoestring whm 

Chiu-Ki Chan 

Want to make your app beautiful, but cannot afford a designer? Fear 
not: There are many easy techniques to prettify your app. Attend this 
class and learn how to use XML and Java to touch up your Android app 
with gradients and round corners, tiled backgrounds, custom fonts, and 
responsive components that look different when focused on and 
pressed. You will also learn various and free resources to incorporate 
into your app, such as color schemes, graphics, patterns and icons. 
Level: Intermediate Topic Area: Developer Essentials 

Becoming More Effective with the Android Emulator 

■EI3H! WlllSi 

Luis de la Rosa 

Are you leveraging the Android Emulator fully? Perhaps you don’t even 
utilize it at all due to its reputation for slowness. However, teams from 
around the world have been steadily improving and enhancing the Emu¬ 
lator: It is faster, can emulate a wider range of devices, and can do more 
than the older versions could. 

In this class, we will show you how to take full advantage of what the 
Android Emulator has available. We will show you why the Android Emu¬ 
lator is one of the most useful tools that an Android developer has 
access to and dispel some common myths about it. We will cover 
recent advances in the emulator like the Intel x86 system images and 
hardware acceleration. We will look into how to emulate different 
devices like the Kindle Fire, Nook and Nexus. Speed is a consideration, 
so we’ll show you ways of how to make starting the emulator up faster. 

You will also learn when it is better to use the Android Emulator and 
when it is better to use an Android device. The Android Emulator also 
makes it easy to simulate some real-world scenarios that are harder or 
costlier to do with a device (such as receiving SMS messages), and we 
will show you how to simulate real-world events inside of the Emulator. 
You will also learn how the Emulator behaves like a rooted device. 

Level: Intermediate Topic Area: Developer Essentials 

Handling the Complexities of Images in Android, 
Part I and II fll9in ww* 

James Halpern 

As most Android developers know, dealing with the extreme degree of 
fragmentation in the Android ecosystem is often challenging. Among the 
more difficult challenges is managing memory usage, as devices that are 
in the market today can have as little as 13MB of memory. Now imagine 
the pains that developers go through when faced with the headache of 
massive bitmaps eating up memory in a millisecond. 

In this 150-minute class, you will be guided through advanced debug¬ 
ging topics, discuss the complexities of image and memory management 
in Android, and then walk through the creation of a successful, powerful 
image-management utility. Come to this class to learn about advanced 
techniques that will help you optimize the performance of your apps. 


Learn about Android’s memory limitations and the role the garbage col¬ 
lector plays in your app’s performance and complexity. 

We will conclude the class by walking through the instructor’s open- 
source image-management solution that gracefully handles most of 
these issues in a simple-to-use package. 

Level: Advanced Topic Area: Developer Essentials 

Little Apps, Big Car Crashes flBHI wmn 

Joey Grover 

Think your app is the next big thing and ready to be used everywhere? 
Think again. Attend this class to learn the problems that lie ahead as apps 
are moved into vehicles. With Ford and GM offering open systems for app 
developers, a big problem awaits: fragmentation and crashes. We will dis¬ 
cuss the state of the connected car industry, the danger zones when devel¬ 
oping for the vehicle, and brands that are getting it right. We will discuss: 

• Is my app ready for the car? How can it be? 

• How will open development platforms from GM and Ford help or hurt me? 

• How can I make my app safer for use in the car? 

• How can I make money by getting my app into the car? 

• What should I be aware of for the future of connected cars when it 
comes to my app? 

Level: Intermediate Topic Area: Developer Essentials 

Multi-user Android rcigiP wim 

Marko Gargenta 

Android OS recently got support for multiple users. While built on top of 
the Linux kernel, Android never really had physical users the way Linux 
does. The way Android manages multiple user accounts is very different 
than most other operating systems. 

In this class, we’ll explain the underpinnings of the multi-user support, 
from the kernel layer all the way to the user experience. We’ll look at 
how Android separates accounts and ensures data privacy. This class 
explores the security implications of multi-user support. 

This class assumes basic understanding of operating systems and 
Android security. Ideally, you will have seen the “Android Security 
Underpinnings” talk prior to attending this class. 

This class is based on the Jelly Bean multi-user version of Android OS. 
Level: Advanced Topic Area: Developer Essentials 

Building REST Server APIs for 
Mobile Apps in PHP U13in mma 
Joe Stagner 

More traffic now travels the Internet to and from mobile devices than 
conventional computers, but mobile app connectivity can destroy the 
user experience and infuriate the end user if done wrong. In this class, 
we'll examine building REST-based APIs and consumption patterns for 
elegant and efficient mobile applications. 

Level: Intermediate Topic Area: Developer Essentials 



“AnDevCon is THE 
conference for Android 
developers to network, 
share and learn with fun.” 

—Neela Annamalai, Staff 
Engineer, Samsung MCSA 
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3:30 pm - 4:45 pm 

A Hands-on Guide to Product-Centric Mobile Apps 
and the Internet of Things A13IB wim 
Christian Floerkemeier 

In this class, we will introduce the notion of a product-centric mobile 
application. We will first give an overview of different product-centric 
and auto-ID use cases and technologies in the consumer and enterprise 
space. We will then discuss selected use cases/apps, and explore the 
core technologies and services (such as mobile barcode scanning, 
mobile OCR, and/or data and analytics services) required to implement 
them. The class will conclude with a hands-on development demo on 
how to design and implement a simple product-centric application that 
effectively supports a business process. 

Level: Overview Topic Area: Developer Essentials, Android Business 

A Primer to SyncAdapters flBHl hum 
Kiana Tennyson 

Companies have been searching for data synchronization methods to 
facilitate business operations since the Web's early days. Today, data 
synchronization has transcended from nice to have to an expectation, 
especially since most devices are bestowed with Internet connectivity. 

This class will seek to clearly lay out the SyncAdapter, Android’s 
scantly documented implementation for data synchronization. We will 
discuss when to use the SyncAdapter strategy, key actors in the system 
and their roles, authentication (and not), and making connections to 
different data sources. You will leave with an understanding of the 
SyncAdapter and how to build custom ones. 

Level: Intermediate Topic Area: Developer Essentials 

Handling the Complexities of Images in Android, 
Part I and II mma 
James Halpern 

As most Android developers know, dealing with the extreme degree of 
fragmentation in the Android ecosystem is often challenging. Among the 
more difficult challenges is managing memory usage, as devices that are 
in the market today can have as little as 13MB of memory. Now imagine 
the pains that developers go through when faced with the headache of 
massive bitmaps eating up memory in a millisecond. 

In this 150-minute class, you will be guided through advanced debug¬ 
ging topics, discuss the complexities of image and memory management 
in Android, and then walk through the creation of a successful, powerful 
image-management utility. Come to this class to learn about advanced 
techniques that will help you optimize the performance of your apps. 
Learn about Android’s memory limitations and the role the garbage col¬ 
lector plays in your app’s performance and complexity. 

We will conclude the class by walking through the instructor’s open- 
source image-management solution that gracefully handles most of 
these issues in a simple-to-use package. 

Level: Advanced Topic Area: Developer Essentials 

Intent + Service + Content Provider = Plug-in 
Architecture wnia 
Jason Weiss 

Android developers often lament the inability for Android to natively dis¬ 
cover and launch application extensions via plug-ins. The native Java Ser- 
viceLoader class is now included in the Android SDK, but it isn’t nearly as 



effective as it is under Java Standard Edition. Java class-loader solutions 
often introduce more problems than they solve, and in practice, Android's 
class-loader separation ensures that object instances created in one 
Activity or Service aren’t visible inside of another Activity or Service. 

All is not lost, however. Android provides all the requisite pieces for 
truly powerful plug-in architectures: Intents, Services and Content 
Providers. The Content Provider fulfills the role of the plug-in registrar. 
Services, even when deployed in separate applications, represent the 
plug-ins available for discovery. Finally, the Intents provide the inter¬ 
process communication mechanism that lets all of these disparate 
pieces work together. 

You will leave the class with an understanding and sample code that 
demonstrates how to create a simple Content Provider implementation 
that serves as a plug-in registrar. Techniques for declaratively classifying 
different types of plug-ins (services) and dynamically registering new 
plug-ins will also be covered in-depth. Application and service metadata 
discovery using the Android PackageManager class will also be covered. 
The class will wrap up with a mini-primer on the Android IBinder interface 
specifically in the context of cross-process method invocations. 

You are encouraged to have a primitive understanding of how 
Android Intents are used. No prior experience with either Services or 
Content Providers is assumed. 

Level: Advanced Topic Area: Developer Essentials 

Reusable Custom Components Wilfli 

Chiu-Ki Chan 

Have you ever extended a View class? If not, this session is for you. We 
will start from a simple example of enhancing the TextView class, and 
finish with a complete custom view with its own size measurement, 
drawing function and custom attributes. We will also discuss the best 
practices for custom views. What is the different between a custom 
view and a fragment? How about a compound control? When to use 
which? By the end of the session, you will know not only how to create 
reusable custom components, but also when to use them. 

Users should have successfully developed an end-to-end app beyond 
“Hello World” and tutorials prior to taking this session. 

Level: Advanced Topic Area: Developer Essentials 
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■ Christine Abernathy 

Christine is an Engineer on the Developer Advocacy team at 
Facebook. In this role, she is focused on supporting strategic 
Open Graph partnerships, and helping grow the mobile devel¬ 
oper ecosystem with an emphasis on Android, iOS, and the 
mobile Web. Prior to Facebook, Christine worked at MShift, a 
mobile banking software provider, delivering iPhone apps and 
mobile browser-based products. She has a long history in the mobile space, 
including cofounding Clickmarks (a mobile and enterprise middleware provider) 
in 1999. Christine has a BS and MS in Electrical Engineering from MIT. 

Chiu-Ki Chan 

Chiu-Ki was on the Android server team when the G1 came 
out. She switched to app development when she moved to the 
maps team, building Google Mobile Maps for Android. After 
brief stints in Web development at two startups, Chiu-Ki is 
now back at her Android roots with her own company for 
Android development. The first title is “Monkey Write,” an app 
for learning Chinese writing. 

Morrison Chang 

Morrison is a veteran software developer currently engaged as 
an Integration Engineer for Medialets, where he is helping 
other developers add rich mobile ads to their apps on multiple 
platforms. He started out working on embedded programming 
in C and assembly at Symbol Technologies (now Motorola 
Solutions); slid into finance with Perl; did more C/C++, SQL 
and Java (at famous and infamous names); and is now involved in mobile. 

He got his G1/ADP back in 2009, and is a commit level/lead member of 
the skylight 1 open-source project. A known face around the Android scene in 
New York City, Morrison has presented at BarCamp NYC and the NYPC’s 
Java Mobile Group. Morrison received his BS in Computer and System 
Engineering from Rensselaer Polytechnic Institute, and his MS in Computer 
Engineering from the University of Southern California. 

Luis de la Rosa 

Luis is the Director of Technology for savvy apps, a boutique 
agency that creates Android and iOS apps. He is passionate 
about Android and blogs at luisdelarosa.com. He has led soft¬ 
ware development teams for more than a decade, and he 
loves to share his knowledge with his teammates. He is also 
active on StackOverflow so he can help other programmers 
around the world and give back to the community. 

Prior to Android, he has been creating Java applications throughout his 
entire career, leading the development of webMethods Developer, an enter¬ 
prise-level IDE for B2B integration. It was originally written in Java Swing with a 
custom application framework, and was migrated to leverage the Eclipse frame¬ 
work as a series of plug-ins and features. As a result, he is very comfortable 
with the ADT plug-in. 

Luis has also worked a variety of other technologies to round out his 15+ 
years of software-development experience, creating Web services in Sinatra 
and Rails, mobile apps in iOS, desktop apps on Mac OS, and clients/servers in 
Smalltalk. 

He lives in the Washington, D.C. Metro area with his wife and six boys. In 
his spare time, he builds LEGO creations and plays video games with his eld¬ 
est sons. 





a Bear Douglas 

Bear is a Developer Advocate at Facebook, where she works 
with new Platform developers on their Open Graph integra¬ 
tions, social design, and use of Facebook’s APIs and mobile 
SDKs. She is responsible for organizing HACKs and other 
developer outreach. If you want to start a Facebook developer 
meetup, she wants to hear from you. 


Leon Farasati 

Leon is a staff product manager for Qualcomm Technologies, 
Inc. He is responsible for Qualcomm Snapdragon development 
platforms, including Qualcomm Snapdragon MDP and 
Dragonboard. 

He has more than 10 years of experience in various design 
engineering and product management roles in the computing 
industry. Prior to joining Qualcomm, he spent six years at NVIDIA corporation, 
where he was most recently a senior product manager in charge of graphics 
processor platforms. 

Leon holds a bachelors of Applied Science in Computer Engineering from 
the University of Waterloo in Canada and a masters degree in Management 
Science and Engineering from Stanford University. 

Donn Felker 

Donn is the founder of Agilevent, an agile and innovative soft¬ 
ware development company that focuses on agile techniques 
and mobile development. He is also a partner in two startups: 
Qonqr and AgileMedicine. He has more than 11 years of pro¬ 
fessional experience in various markets, including entertain¬ 
ment, health, retail, insurance, financial and real estate. 

Donn is the author of the best-selling “Android Application Development for 
Dummies,” “Android Tablet Application Development” and the “Introduction to 
Android Development” video series on TekPub.com. He is an Android seeding 
developer awardee as well as an accomplished application author with more than 
3.2 million installs in the Android Market. He is also a Microsoft ASP Insider, an 
MCTS in Web Client Development for .NET, and a certified ScrumMaster. 

Donn presents and consults on various topics ranging from architecture, 
development in general, agile practices and patterns, and of course, mobile. 
Read Donn’s blog here: blog.donnfelker.com. 

Elon Flegenheimer 

Elon has been in the consulting and software development 
fields for 13 years. He is currently employed as a software 
architect developing a telematics platform, and he works as a 
freelance consultant. While he spends most of his develop¬ 
ment time working with Ruby, he has a long history with Java 
and also enjoys working on Android. 

Christian Floerkemeier 

Christian is the CTO and cofounder of Scandit, and is respon¬ 
sible for Scandit’s image-recognition technology, software 
development, and research road map. Before founding 
Scandit, Christian was the Associate Director of the Auto-ID 
Labs at MIT, and a member of the MIT research team that 
developed the RFID technology, which is today in use in major 

Christian also cofounded Fosstrak, the leading open-source RFID software 
platform that implements the EPC Network specification, and is used in RFID 
projects at Orange/France Telecom, SAP, TCS and many others. Christian has 
published his research in leading conferences and journals, and was the techni¬ 
cal program chair of the Internet of Things Conference in 2008 and IEEE RFID 
2009, and general chair of IEEE RFID 2011. 

Christian received a Ph.D. in Computer Science from ETH Zurich, and a 
Bachelor and Mechanical Engineering degree in Electrical Engineering from the 
University of Cambridge. 



supply chains. 
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Marko Gargenta 

Marko is the founder of Marakana.com and the developer of 
Marakana Android Training series. He has taught Android to 
more than 1,000 developers and sales engineers at companies 
such as Cisco, Motorola, Sprint, Qualcomm, Intel, HTC, 

Sharp, the US Department of Defense and many others. 

Marko is also the author of “Learning Android," and 
frequently speaks at conferences and events such as OSCON, AnDevCon, 
Sprint Developers Conference, IEEE, ACM, and many others. He lives in 
San Francisco. 

Robert Green 

' Robert is an independent video game developer from Portland 
% <8 who publishes mobile games under the brand Battery Powered 

| Games. He has developed six mobile games for Android in the 
I last two years, which include overhead 2D action games, a word 
puzzle game, and a 3D OTS/FPS shooter in a custom engine. 

Before diving full-time into indie video game development 
and publishing, Robert worked for software companies in Minneapolis and 
Chicago, including IBM Interactive. Robert’s current focus is on cross-platform 
game development and high-performance mobile gaming. 

Joey Grover 

Joey traded in his tie and Dockers in 2011 to join Livio’s quirky 
team of engineers and to specialize in mobile tech develop¬ 
ment. At Livio, Joey specializes in mobile software develop¬ 
ment through the Livio Connect protocol. 

While at Livio, he’s been behind several developments, 
including dynamically launching apps from hardware, connec¬ 
tion management between Livio Connected apps and the Livio Android devel¬ 
opment suite that premiered at the 2012 Consumer Electronics Show. 

Prior to joining Livio, Joey worked as an application developer at IBM 
Global Business Services where he worked with data access and management 
on different project teams for IBM clients. He was also a part of Audio 
Enthusiasts and Engineers as a team leader where he organized and super¬ 
vised the first electric drum kit build team. 

Before he became a coding rock star, Joey earned his undergraduate 
degree in computer and electrical engineering from Michigan State University. 
While there, he cultivated his love for all things nerdy. 

1 James Halpern 

James is a Mobile App Developer currently working at Xtreme 
^ ♦ m Labs in Toronto. After graduating from Computer Engineering 

’ at the University of Toronto, James started as a Quality 

j Assurance Engineer and PHP server-side developer for apps 

on the Facebook platform. Since starting at Xtreme Labs, he 
has had experience with WebOS and Android, and has helped 
to develop the CBS Sports app for the HP Touchpad, Sprint NBA Mobile, NBA 
Game Time, and Viggle for Android, and is currently putting the final touches 
on his latest Android effort. 

He is an active contributor to Android tools within Xtreme Labs, and is 
working on bringing several of those efforts to the open-source community. He 
also volunteers as a mentor for Ladies Learning Code, teaching beginner pro¬ 
grammers the basics of development. 

Chris Haseman 

Chris has been writing mobile software in various forms since 
2003. He was involved in several large-scale Brew projects, 
from MMS messaging to Major League Baseball. More recent¬ 
ly, he was an early Android engineer behind the doubleTwist 
media player and is now the lead Android developer for Tumblr. 
He’s a faculty member of General Assembly in New York City, 
and just published “Creating Android Applications.” He lives in Brooklyn, 
where he constantly debates shaving his beard. 





Bob Heubel 

Bob is a Haptic Technology Evangelist with Immersion, special¬ 
izing in helping developers implement what is known as force- 
feedback, tactile-feedback or rumble-feedback effects. He has 
spent more than 10 years working with developers, carriers, 
OEMs and ODMs to design and program these sensations 
aimed at improving both gaming and interaction experiences. 
You may have felt some of Bob’s work in Rockstar Games, Grand Theft Auto 
III or Sega’s Sonic 4 Ep. II for Android. Bob graduated from UC Berkeley in 
1989 with a BA in English Literature. 




Graham Holker 

Graham is an Agile Engineer at Xtreme Labs, where he is the 
lead developer on an app for Android phones, tablets and 
Google TV. The app includes live streaming video, video on 
demand, notifications, banner and pre-roll ads, and more. It 
supports Android 2.2+, has more than 1 million installs, and 
has a 4.2-star rating on Google Play. While a graduate student 
at Ryerson University, Graham ran tutorials for introductory and intermediate 
computer science courses. Previously, Graham has been a Web developer 
using the Microsoft stack and, even further back, an RFID consultant. 

Chris Huban 

Chris is an Art Director who works closely with the interaction 
design team to direct concepts and produce the visual design 
* for some of Huge’s largest initiatives, including Sirius XM, 

\ Swisscom, and GE Capital. Prior to joining Huge, Chris held 
senior design positions at Night Agency, SiiTE Interactive and 
Cendant, working with clients like Dish Network, Keds, Purex, 
Hanes, Esquire and Oprah. Chris earned a BFA in Communication 
Design/Graphic Design from Pratt Institute. 



Corey Leigh Latislaw 

Corey Leigh is currently taking a sabbatical to travel, work 
on creative projects, and sharpen her Android skills. Recently, 
as a Senior Mobile Architect at Chariot Solutions, she helped 
businesses in many subject domains determine their mobile 
needs and build their solutions. She created the Philadelphia 
Android Alliance, a rebel army whose mission is to conquer 
Apple’s market share, and cofounded a startup that builds apps for the greater 
good. She leads local workshops through the Android Alliance, Skillshare and 
Girl Develop It, and she spreads the love for Android and fragments. 

Corey is passionate about encouraging broader participation in computing 
sciences, local food, the outdoors, photography, and living in downtown Philly. 
In a past life, she helped build the XfinityTV Android and iOS applications at 
Comcast Interactive Media, and she worked on various security projects at 
Cisco Systems. You can find her at coreylatislaw.com. 



© Dario Laverde 

Dario is a Developer Evangelist at HTC. He has experience in 
software development for mobile, embedded, Web and enter¬ 
prise. Among his various professional roles, he has worked as 
an Android Instructor, consultant, Java architect, author and 
entrepreneur. Dario leads the NYCJava JUG, and co-organizes 
both the NYC-GTUG and the New York Android Developers 
Meetup. He also cofounded the skylight 1 open-source Android project. 
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Jason Mark 

With Jason at the helm, Gravity Switch continues to be the 
leader in New England in Web and mobile applications devel¬ 
opment. In addition to software design, Jason has written and 
collaborated on a handful of children’s books (both for himself 
and clients). He has also created ePub books, some of which 
are currently available in Apple’s iBook store. Always passion¬ 
ate about teaching, Jason was one of the first professors of website design in 
the country. He even had students who commuted to Massachusetts from 
California to take his classes! 

Geoff Matrangola 

In addition to his day job leading a team developing specialized 
Android and iOS apps for law enforcement and the intelligence 
community, Geoff has two apps (Cue Sheet and QrU) on the 
Google Play Store. Geoff has also been an adjunct professor 
at Loyola University Maryland in the Computer Science 
Graduate Program since 2003. 

Nathan Mellor 

Nathan is the CEO and Chief Developer at CritterMap 
Software. He is the author of BackCountry Navigator, the 
best-selling outdoor GPS application for Android, which has 
recently been featured as the No. 1 paid app in the Travel and 
Local category. 

Back when he had a day job, Nathan worked for Hewlett- 
Packard as a software engineer for 12 years. When that job ended, Nathan 
decided to build an online business through Android apps instead of contract¬ 
ing or getting a “real” job. 

Nathan holds a Masters Degree in Computer Science from Brigham Young 
University. In 2010, Nathan earned a Certification in Internet Marketing from 
the University of San Francisco Online, including Advanced Certification in 
Web Analytics and Advanced Certification in Mobile Marketing. 

Manfred Moser 

Manfred is an experienced Android developer with a long his¬ 
tory of developing software in the Internet, enterprise and 
mobile space. With a past as senior developer, consultant and 
mentor, he is providing services with his own little company, 
Simpligility Technologies. 

Manfred is the founder of the Vancouver Island Java User 
Group, and a committer on various open-source projects. With an engineering 
background and teaching experience, Manfred has been presenting about vari¬ 
ous technologies at user group meetings and conferences around the world. 

He has a passion for agile and lean methodologies, and an interest in tools and 
infrastructure that helps other developers and development teams. He loves 
mentoring others and sharing his experience and knowledge. 

Ron Munitz 

Ron is a seasoned embedded software engineer. In his current 
role as the CTO of Nubo Software, he has taught develop¬ 
ment groups the concepts of Android internals, bring up, port¬ 
ing, and application development. Some of his contributions 
include porting Goldfish to recent kernels, Ethernet patching, 
and allowing full integration on Android-x86 on various hard¬ 
ware and virtual machines (i.e. XEN, VirtualBox, VMware and QEMU). 

Prior to that, Ron was a principal engineer at BigBand Networks, focusing 
on ATCA board bring ups, networks, and video processing. Before that, he 
was a technical leader at the DDR&D, specializing in Aerospace solutions. 

In his technical leading roles, Ron has been constantly giving talks on 
Embedded Linux, fault-tolerant development on safety-critical systems, and 
Android internals. He holds an MS in computer Science (with distinction) from 
Bar-llan University, and was a teaching assistant in various courses there. 






Mark Murphy 

Mark is the founder of CommonsWare and the author of “The 
Busy Coder’s Guide to Android Development,” among other 
books on Android application development. He is active in sup¬ 
porting the Android developer community, from answering 
questions on StackOverflow to publishing sample code and 
reusable components as open source. 

A three-time entrepreneur, his experience ranges from consulting on open- 
source and collaborative development for the Fortune 500, to application devel¬ 
opment on just about anything smaller than a mainframe. He has been a soft¬ 
ware developer for nearly three decades, from the TRS-80 to the latest crop of 
mobile devices. Mark teaches Android application development worldwide for 
the public and for corporate customers. 

Godfrey Nolan 

Godfrey is founder and president of RMS, a mobile develop¬ 
ment firm in the Detroit Metro area. He is also author of 
“Decompiling Java" and the soon-to-be-published 
“Decompiling Android.” Godfrey has spoken at JavaOne, 
ASP-Connections, VSLive, CodeMash, Code PaLOUsa, 

1 DevDay, and many local Java and .NET user groups on a 
wide range of topics, such as continuous integration, executable requirements 
and mobile security. 

t Jason Ostrander 

Jason is a Web and Mobile Software Developer, currently 
creating apps for the Nook tablet at Barnes & Noble. 

Prior to that, he worked on Android media sync and playback 
at startup doubleTwist, solved networking problems at energy 
management startup Sentilla, and wrote satellite communica¬ 
tions simulations at defense company Northrop Grumman. 
Jason holds an MS in Electrical Engineering from UCLA. He lives with his wife 
in New York City. 

Pragati Ogal Rai 

Pragati is the mobile developer evangelist with PayPal, an 
eBay company. She is also a mobile and security technologist 
with more than 12 years of experience in mobile operating sys¬ 
tems, mobile security, mobile payments, and mobile com¬ 
merce. From working as a platform security engineer with 
Motorola Mobility, to designing and developing PayPal’s mobile 
offerings, she has extensive end-to-end experience in all aspects of mobile 
technology. 

Pragati has dual masters in Computer Science, and has taught and trained 
computer science students at different levels. She is a recognized speaker at 
international technology events, and is often called “a geek who can speak.” 

Vijay Penemetsa 

Vijay currently works at Huge as an Android developer. He has 
been working on an On Demand video streaming application 
which involves parsing large datasets on the device and a lot 
of custom Ul. Prior to working at Huge, Vijay was a Research 
fellow at Rutgers University working on a multitude of Android 
projects where he also received his Masters degree in 
Computer Engineering. 
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K HH Marc Richards 

' Marc is a Senior Software Engineer at Twitter, and member of 
|h I the Crashlytics team, building industry-leading mobile crash 
\ reporting solutions. Marc’s primary responsibility is the design 
and development of the Crashlytics Android SDK. Prior to join- 
"w ing Crashlytics, Marc was an independent mobile developer 
with apps published in Google Play and the Apple App Store. 
Marc has worked as a Scientist at Charles River Analytics, where his 
responsibilities included research and development of applied artificial intelli¬ 
gence approaches for defense and commercial systems. Marc has taught 
undergraduate math and computer science courses at Colorado State 
University, and has presented at numerous academic conferences, including 
the Genetic and Evolutionary Computation Conference (GECCO) and the 
International Conference on Complex Systems. 

Chris Risner 

Chris is a Windows Azure Technical Evangelist at Microsoft, 
and is focused on connecting Windows Azure with mobile 
apps. He has been working with iOS and Android development 
for the past several years. Before working in mobile develop¬ 
ment, Chris worked on many large-scale enterprise applica¬ 
tions in Java and .NET. Chris is a prodigious learner who loves 
technology of all flavors, and has a vast amount of experience in Smart Clients, 
ASP.NET MVC, C#, Java, Objective-C, Android and iOS. You can find out 
more about Chris at chrisrisner.com. 

1 — : Gerry Schenk 

Gerry is a Programming Instructor at the Northern Alberta 
Institute of Technology (NAIT). He has won several Instructor 
Awards during his 20 years there. He also has had the oppor¬ 
tunity to teach programming for more than a year in China and 
a year in the Philippines through the institute’s international 
education program. Gerry also consults privately, and has 
mentored development teams in a variety of areas in the U.S. and Canada. His 
favorite conference prior to AnDevCon was Euroscon in Amsterdam. 

Larry Schiefer 

Larry is the CTO and cofounder of HiQES, a mobile, embed¬ 
ded and Web application-development service company. He 
has been a platform and application developer for Android since 
it was first publicly available. He is a long-time device driver, 
board support package, application and kernel developer for 
Android, Linux, Windows, and various RTOS environments. 
Larry has successfully led teams with the development of several new Android 
devices, from Bootloader up through customized applications. Additionally, Larry 
has developed and given technical training courses to customers and team 
members, bringing them up to speed quickly on new technologies. 

When he is not developing new mobile and embedded software, Larry 
spends his time with his wife and twin sons, and in learning about new tech¬ 
nologies. He holds a Bachelor’s degree in Computer Engineering from Rose- 
Hulman Institute of Technology, and is a member of the IEEE. 

Jeff Seibert 

Jeff, Director of Engineering at Twitter, is an experienced seri¬ 
al-entrepreneur with a passion for deeply technical Internet 
software. His latest company, Crashlytics, was acquired by 
Twitter in January of 2013. Previously, Jeff was the CEO of 
Crashlytics, which he co-founded in 2011. Crashlytics deliv¬ 
ered crash analysis tools for iOS and Android apps via an SDK 
that reached 300 million mobile devices worldwide. 

In 2007, Jeff co-founded Increo and served as its COO and lead architect 
until its acquisition by Box in August of 2009. He subsequently oversaw the 
integration of Increo’s document preview and annotation technologies into the 
company’s cloud-based content platform. 





Jeff gained experience at Apple in both marketing and engineering capaci¬ 
ties and led Stanford University’s Entrepreneurial Thought Leaders seminar 
series as co-coordinator. He was selected as a Mayfield Fellow in 2007 and 
received a B.S. in Computer Science from Stanford University in 2008. 

Jeff discovered his passion for entrepreneurship and programming at a young 
age, founding Arios Software during high school in Baltimore, MD and dedicating 
countless hours to developing Mac desktop software long before it was a cool 
platform. Outside of work, Jeff enjoys surfing, snowboarding, hiking, and tennis. 


Dave Smith 

Dave is the lead engineer for mobile and embedded develop¬ 
ment at Xcellent Creations in Denver. Prior to that, he worked 
as an engineer developing embedded wireless monitoring and 
control systems for the industrial automation market. Today, 
his focus is primarily on writing mobile applications that inter¬ 
face with custom hardware and accessories. He also has a 
strong passion for developing custom applications and system components to 
run Android on Freescale and Tl-based embedded platforms. 

He is the lead author of the popular developer cookbook “Android Recipes: 
A Problem-Solution Approach," and a regular guest columnist on Android 
developer matters at SD Times. He also provides regular developer tips and 
sample code on his blog, www.wiresareobsolete.com. 



a Joe Stagner 

Joe is the Director of Developer Strategy at Zend 
Technologies - The PHP Company. He is a software 
development professional with over 30 years of software 
engineering and IT business experience. Prior to joining Zend, 
Joe held the position of Senior Program Manager of 
Developer Ecosystem at Mozilla. Joe also spent 10 years in 
the the Microsoft Developer Tools and Platforms group. Before that, he was 
a serial startup guy riding the dot-com wave. 



Doug Stevenson 

Doug is currently an Android Architect at GREE International, 
designing a client platform for games with worldwide exposure. 
' Previously, he was the Android team lead at SoundHound, one 
of the Play Store’s all-time top applications. He has also taught 
I extended Android boot-camp classes in addition to Java class- 
■ es. Doug is also the developer of Act 1 Video Player, which is 

a personal project that has enjoyed success on the Play Store. 



Zack Sultan 

Zack is a designer at Tumblr, where he works on perfecting 
both the Web and mobile apps. Previously, he made digital 
products for new and established brands, including Coca-Cola 
and Sephora. 



Moe Tanabian 

Moe is a senior Mobile Technologist and Strategist with exten¬ 
sive international involvement. He is also a key influencer of 
several leading-edge mobile technologies and their evolution 
from both a technical and business perspective. 

In the past, Moe worked for the wireless division of Nortel 
as a lead architect for CDMA and UMTS infrastructure prod¬ 
ucts, and at Arthur D. Little, a global-management consulting firm assisting 
Telecoms clients. Currently, he is the development lead for Amazon Appstore 
for Android at a2z Research and Development in Irvine, Calif. 

Moe is a frequent speaker at major industry events, and is often quoted by 
the media on the evolution of wireless technologies, smartphones and Android 
in particular. He holds a Masters degree in Systems and Computer Engineering 
from Carleton University, Ottawa, and an MBA from Queen’s University, 
Kingston, Ontario. Moe is a senior member of the IEEE. 
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David Teitelbaum 

David is the Vice President of Engineering at Apkudo, currently 
working on the new Android instrumentation framework, 
Apkudo Ape. David has heavy research experience in embed¬ 
ded systems, with a focus in digital signal processing and wire¬ 
less communication between a wide range of processors and 
platforms. As an avid Android hacker, he spends most of his 
time patching APKs, hacking Android cores, and drinking insane amounts of 
Red Bull. David’s most recent project has been building the Scramble with 
Friends Top Scoring Robot using APK code injection and Apkudo Ape. 

In his free time, David loves to play tennis, guitar, and taking long walks on 
the beach with his special lady friend. 

Kiana Tennyson 

Kiana is a software engineer at Manheim, a subsidiary of Cox 
Enterprises, headquartered in Atlanta. She has been working in 
the software industry, developing Web and mobile applications 
alongside some amazing developers since 2005. She graduat¬ 
ed from the Georgia Institute of Technology with a degree in 
Computer Science, and has experience in Java (her fave), 

Ruby on Rails, Android and iOS, among other tools. 

When she’s not working, she is thinking about work, or listening to her 
coworkers argue the pros and cons of various software, tools, IDEs and SDKs, 
while quietly forming opinions. She also enjoys walking her dog or learning 
another song on the piano. 




Peter van der Linden 

Peter has worked on mobile phone software since the days 
when cell phones were used to make voice calls, and desktop 
PCs were used for website browsing. These days, it’s the 
other way around: We use VOIP from our desktop PCs, and 
browse on the go from our mobile phones. 

Peter is also the author of several award-winning books on 
programming in Java and C. He is the creator of several software patents, and 
a technology evangelist with Immersion. Immersion provides software for hap¬ 
tic (touch and vibration) effects on mobile phones. 



Jason Weiss 

Jason has an exceptional background in software engineering, 
cryptology and computer security, dating back to his service in 
the US Navy as a cryptologist during the first Gulf War. He is 
the author of “Java Cryptography Extensions" and the inven¬ 
tor of the patented Volume Mount Authentication computer 
security technology. He was also recognized in 2000 by the 
NSA as a talented security designer of critical infrastructure protection. 

Jason has lectured internationally, including numerous presentations at SD 
West, Sybase TechWave, and a keynote on NFC development at the 2008 
WIMA European NFC Developers Summit in Monaco. He is the former Chief 
Software Architect for Over-C, a U.K. company specializing in NFC, and is 
presently the CEO and Chief Software Architect at Tag Dynamics, a company 
specializing in NFC workflow solutions. 



Jake Wharton 

Jake is the author of numerous Android and Java libraries, 
such as ActionBarSherlock, NineOldAndroids, and 
ViewPagerlndicator, aimed at simplifying application develop¬ 
ment. His libraries are leveraged in numerous multi-million 
install and “Top Developer” applications on both the Google 
Play Store and Amazon App Store. He specializes in back- 
porting functionality from the newer Android versions with a philosophy that 
developers should spend less time worrying about API differences and more 
time writing great apps. 

Mark Wickham 

Mark is based in China and is focused on creating Android 
tablet app solutions for the enterprise. He moved to Beijing in 
2000 where he led R&D teams for Motorola Solutions, which 
delivered GSM and UMTS solutions to global telecom cus¬ 
tomers. Mark later headed the Asia Pacific Product 
Management team, which was responsible for product road 
maps and requirement identification. Mark then started his own company in 
2009 and began to focus on Android solutions after attending AnDevCon I and 
AnDevCon II. 

Mark majored in Computer Science and Physics at Creighton University in 
Omaha, Neb., and later obtained an MBA from the University of Washington 
and the Hong Kong University of Science and Technology. Mark is also active 
in China as a freelance video producer and photographer, and enjoys recording 
live music. 





Jesse Wilson 

Jesse works on the Wallet and Register Android apps at 
Square. Prior to Square, he led the Android core libraries 
team, where he worked on JSON, XML, HTTP and collections. 
He’s contributed to many open-source projects, including 
Guava, Gson and Caliper. He’s given tech talks at QCon 
(Dagger), Google I/O (Guice) and JavaOne (Glazed Lists). 


Mike Wolfson 

Mike is a passionate mobile designer/developer working out of 
Phoenix. He has been working in the software field for more 
than 15 years, and with Android since its introduction. 

Currently, he develops Android applications for Choice Hotels 
International. He has a few successful apps in the Market and 
is an active contributor to the tech community, including organ¬ 
izing the local GTUG. 

Mike has spoken about Android and mobile development at a variety of 
conferences and user groups. When he is not geeking out about phones, he 
enjoys the outdoors (snowboarding, hiking, scuba diving), collecting PEZ dis¬ 
pensers, and chasing his young (but quick) daughter. 
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Hotel and Travel 



AnDevCon will be held at 

the Westin Boston Waterfront Hotel 


Westin Boston Waterfront Hotel 

425 Summer Street 
Boston, MA 02210 
Phone: +1-617-532-4600 
www.westinbostonwaterfront.com 


Reservations 

Special Discounted Rates 

Room rates for AnDevCon attendees are US$195 per night 
for single/double occupancy. 


Rooms for the reduced rate are limited and are available on a first-come, 
first-served basis. 


CLICK HERE to make your hotel reservation (or use the “Make Hotel 
Reservation” option on the confirmation page of your registration). 
Reservations at the reduced rate can be made through 5:00 pm Eastern 
time on May 14, 2013—assuming they don’t sell out. The number of 
rooms in the discounted block is LIMITED, and historically rooms sell 
out well before the deadline. Don’t wait until the last minute to reserve 
your hotel rooms! 

This rate is available throughout AnDevCon. Those who reserve their 
hotel rooms via this reservation link (our room block) will receive 
complimentary wireless Internet service in their rooms. 

Hotel Highlights 

The Westin Boston Waterfront Hotel is a AAA Four Diamond 
award-winnern and is fewer than three miles from Logan International 
Airport. It is a short cab, water taxi or train ride away from Back Bay, 
the Financial District, and Boston’s other places to be. 

Driving Directions 

From the East: Follow signs out of Boston Logan International Airport to 
Interstate 90 West/Massachusetts Turnpike West by way of the Ted 
Williams Tunnel. Take Exit 25 to South Boston. Keep right at the fork 
and exit onto Congress Street. Turn right on D Street. Turn right on 
Summer Street; the hotel is on the left. 


From the North: Take Interstate 93 South to Exit 20A toward South Sta¬ 
tion. Turn left at the light onto Summer Street. The hotel is approximately 
0.7 miles ahead on the right just past the convention center. 

From the West: Take Interstate 90 East to Exit 24A (South Station). Go 
straight onto Atlantic Avenue. Turn right onto Summer Street. The hotel 
is approximately 0.7 miles ahead on the right, just past the convention 
center. 

From the South: Take Interstate 93 North to Exit 20 (South Station). 
Turn right at the end of the ramp on Kneeland Street, then turn at the 
second left onto Atlantic Avenue. Turn right on Summer Street; the 
hotel is ahead approximately 0.7 miles ahead on the right. 

Current Parking Rates 

Self-Parking: $35 (plus tax) per day (for a 3-24 hour period) 

Valet Parking: $45 (plus tax) per day (for a 3-24 hour period) 
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Getting Approval 


Media Sponsors 


Gotta Get Approval? 

Try These 10 Time-Tested Tactics: 

1 STUDY. Find the classes and tutorials at the Android 
■ Developer Conference focused on Developer Essentials, 
Android Business, Tablets and Beyond, and Embedded Android. 
Find the sessions that are best for you. 
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2 PREPARE. Download the course catalog and circle the classes 
■ you want to take, and explain why the topics relate to your 
Android technical efforts. 

3 CHOOSE. There are many sessions offered in each time slot. 

■ That means that you’ll always find something that fits your 
needs and is at just the right level for your own Android development 
and management needs. 

4 JUSTIFY. Go to your manager armed with all the necessary 
■ materials to make a good case for how AnDevCon will help 
your company make money, save money and improve productivity. 

5 SHARE. Promise to come back from AnDevCon and hold a 
■ brown-bag lunch session to share what you’ve learned with your 
colleagues, or even conduct formal training within your department. 

6 SAVE. The sooner you register, the more your company 
■ saves, so explain the benefit of signing up early, both for the 
conference and for the hotel, and for making your travel 
arrangements right away. 

7 TEAM. Save even more with group discounts. Send three or 
■ more employees from your company and save $100 per person. 
Each person can take different classes and bring back even more 
valuable tips and techniques. 

8 BIG TEAM. Are 10 or more of you coming to AnDevCon? 

■ Contact Stacy Burris for special arrangements, at 
sburris@bzmedia.com 

9 DISCOUNTS User groups, government employees, 

■ non-profits and professionals employed by or attending 
educational institutions are eligible for special savings 
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A A ACT. While you can sign up anytime, your company will save 
I \Ju the most if you beat the early deadlines. Help your company’s 
bottom line by signing up today! 
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Registration 


Register TODAY at www.AnDevCon.com! 



Register By 

Register By 

Register By 

Register On or 


March 8 

April 12 

May 10 

After May 11 

Three-Day Full Event Passport PLUS 

$1,295 

$1,395 

$1,495 

$1,795 

Pre-Conference Tutorials 

SAVE 

SAVE 

SAVE 


May 28-31, 2013 

$500 

$400 

$300 


Three-Day Passport (Conference Only) 

May 29-31, 2013 

$1,095 

$1,145 

$1,245 

$1,495 

Pre-Conference Tutorials Only 

May 28, 2013 

$645 

$675 

$715 

$795 

Exhibit Hall Only 

FREE 

FREE 

FREE 

$50 

May 30-31,2013 




All fees are in US$ 

Three-Day Full Event Passport PLUS 

HOW TO REGISTER 


CANCELLATION AND 


Pre-Conference Tutorials 
Registration Includes: 

• Admission to pre-conference tutorials 
on May 28 

• Admission to sessions and technical classes 

• Admission to keynotes 

• Admission to Exhibit Hall 

• Admission to all special events, including the 
Networking Reception 

• Conference materials—PDF files available for 
download on website 

• Coffee breaks and lunch where indicated 

Three-Day Passport Only 
Registration Includes: 

• Admission to sessions and technical classes 
on May 29-31 

• Admission to keynotes 

• Admission to Exhibit Hall 

• Admission to all special events, including the 
Networking Reception 

• Downloadable conference materials 

• Coffee breaks and lunch where indicated 

Pre-Conference Tutorials Only « 

Registration Includes: 

• Admission to pre-conference tutorials 
on May 28 

• Downloadable conference materials 

• Coffee breaks and lunch where indicated 

Exhibit Hall Only Registration Includes: 

• Admission to the Exhibit Hall May 30 & 31 

• Admission to Networking Reception May 30 


Register online and use one of the following 
payment methods: 

Credit Card. You can use the secure online form 
to pay via credit card and get immediate confir¬ 
mation of your registration. MasterCard, Visa and 
American Express are accepted. You’ll receive a 
registration record and receipt. Please print out 
these pages and bring them with you to the Con¬ 
ference. Present them at the Registration Desk 
to pick up your badge and course materials. 

Check. Fill out the online registration form. 

Print out the registration record and receipt, 
then mail to BZ Media LLC, 7 High Street, 

Suite 407, Huntington, NY 11743 with your 
payment. Online registrations that are mailed 
without payment will not be confirmed until pay¬ 
ment is received. 

Purchase Order. If you register using a P.O., 
you’ll be invoiced immediately for the registra¬ 
tion amount. Payment must be received before 
your registration can be confirmed. 


REFUND POLICY 

You can receive a full refund, less a $150 regis¬ 
tration fee, for cancellations made by Friday, 
April 12, 2013. Cancellations after this date are 
non-refundable. Send your cancellation in writ¬ 
ing to registration@bzmedia.com. Registrations 
may be transferred to another person. Refunds 
will be processed through the same method of 
payment as the initial payment transaction. 
Credit card refunds will be processed to the 
same credit card as the original payment. 

If for reasons beyond our control the 
conference cannot take place as scheduled, 

BZ Media reserves the right to reschedule the 
conference to a date and place of its choosing. 

QUESTIONS 

Contact Stacy Burris, Event Director at 
sburris@bzmedia.com or +1-631-421-4158 xl 08. 


SPECIAL DISCOUNTS 


Register 

TODAY! 



You may combine one of these special discounts with 
the Early Registration pricing to save even more! 


fj' CENTRAL 
l R CONTRACTOR 

XL registration 


Group. Group discounts will be given automatically if you register three or more people at once. 
You can also contact Stacy Burris at sburris@bzmedia.com to receive the $100/person discount if 
your group is unable to register at the same time. Contact her also for special discounts for 
groups of 10 or more. 

Government Employees. Federal, State and Local Government employees can 
receive an additional $100 off the Full Event Passport price. Enter code GOV in 
discount code field. CCR-registered indicates that we are listed in the primary 
supplier database for the Federal Government. 

Educational Institutions. Personnel employed by or attending educational institutions can get 
a $100 discount off the Full Event Passport price by using the code EDU. 

User Groups. Contact Stacy Burris at sburris@bzmedia.com to see if your group is eligible for 
a discount. 

Non-Profit Organizations. Personnel employed by non-profit organizations can get a 
$100 discount off the Full Event Passport price by using the code NONPROFIT. 
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